Just got a text from 07770 984723 (now reported to Vodafone on 7726 as
suspicious). Apparently someone tried to deliver a parcel today. I had
to click on a link to
https://royalmail.uk-courier(munge-added-by-me-here).com to arrange
another delivery. Unfortunately I clicked on the link as I was expecting
a parcel, and what /looked/ like a Royal Mail site appeared. I didn't
click any further links as I was suspicious.

According to <https://www.ncsc.gov.uk/guidance/avoiding-banking-malware>
I should do a factory reset to be sure of getting rid of any malware
downloaded from the link. However, others say that the malware doesn't
come with the first link, but by clicking on links in it, which I did
not do. I *never* use the phone for banking or other financial matters
(including internet ordering) and only access email and two other
accounts, one of them being Vodafone. The other is a weather network.
Neither are particularly important. A reset would be a small
inconvenience but is it necessary?

The phone runs Android 13 (MIUI 14), and a security scan comes up clean.

Anyone got any experience of these sort of scams?

--

Jeff

Jeff Layman wrote:

> I clicked on the link as I was expecting
> a parcel, and what /looked/ like a Royal Mail site appeared. I didn't
> click any further links as I was suspicious.

I think that type of site is more aimed at getting a few quid
"re-delivery fee" out of you than sending malware.

On 27/10/2023 18:38, Jeff Layman wrote:
> Just got a text from 07770 984723 (now reported to Vodafone on 7726 as
> suspicious). Apparently someone tried to deliver a parcel today. I had
> to click on a link to
> https://royalmail.uk-courier(munge-added-by-me-here).com to arrange
> another delivery. Unfortunately I clicked on the link as I was expecting
> a parcel, and what /looked/ like a Royal Mail site appeared. I didn't
> click any further links as I was suspicious.
>
> According to <https://www.ncsc.gov.uk/guidance/avoiding-banking-malware>
> I should do a factory reset to be sure of getting rid of any malware
> downloaded from the link. However, others say that the malware doesn't
> come with the first link, but by clicking on links in it, which I did
> not do. I *never* use the phone for banking or other financial matters
> (including internet ordering) and only access email and two other
> accounts, one of them being Vodafone. The other is a weather network.
> Neither are particularly important. A reset would be a small
> inconvenience but is it necessary?
>
> The phone runs Android 13 (MIUI 14), and a security scan comes up clean.
>
> Anyone got any experience of these sort of scams?
>
Usually these are designed to steal you banking or credit card
credentials, not install malware. So once you have paid them they clean
out your bank account...

e.g.

https://www.independent.co.uk/life-style/royal-mail-scam-common-signs-b1821820.html

Dave

On 27/10/2023 18:38, Jeff Layman wrote:
> Just got a text from 07770 984723 (now reported to Vodafone on 7726 as
> suspicious). Apparently someone tried to deliver a parcel today. I had
> to click on a link to
> https://royalmail.uk-courier(munge-added-by-me-here).com to arrange
> another delivery. Unfortunately I clicked on the link as I was expecting
> a parcel, and what /looked/ like a Royal Mail site appeared. I didn't
> click any further links as I was suspicious.

> The phone runs Android 13 (MIUI 14), and a security scan comes up clean.
>
> Anyone got any experience of these sort of scams?

Thanks for the reassuring(?!) replies. I won't to a reset, but will have
to be more careful in future.

--

Jeff

On 28/10/2023 08:16, Jeff Layman wrote:
> Thanks for the reassuring(?!) replies. I won't to a reset, but will have
> to be more careful in future.

One of TV police reality programmes about traffic police last night
showed someone speaking to them outside the police station after getting
a message from scammers.

One thing to bear in mind is that many large organisations had their
systems hacked because of poor security. This could include names,
EMail addresses, passwords of users. These are then sold off so you can
get a scam message with your name and (usually an old password of yours)
which makes it look more of a threat.

One nasty trick some do is accuse people of visiting porn sites or even
child porn sites and claim to have screen grabs to prove this but they
never give an example of the images they claim to have got from the
person's camera - I do not have a camera attached to my computer but
have received these threats!