Evri Phishing Scam
It is coming up to Christmas and many of us may be expecting parcel deliveries and Evri is one of the leading courier companies in the uk. Surely this is a genuine message from Evri. If it was then it would come from an official Evri email account and the click through link would be to the official Evri website. This looks very much like a phishing scam by criminals...
E-Mail received:
Date: No date
From: Evri noreply@ot-me.com
To: [Name and email address redacted]
Subject: Action required: Please reschedule your Evri delivery.
Notes:
The sender email address, noreply@ot-me.com is not connected with Evri. The website OT-Me.com is a digital occupational therapy (OT) platform designed to provide personalized therapeutic support for children, teens, and their families. It seems that the email address may have been spoofed.
The click through web address is https://oh8c7pu3pq6vbkxr.s3.ap-south-1.amazonaws.com/index.html again no connection with Evri. A fake website to harvest card details, usually a small payment is requested for a redelivery which needs to be paid by bank card.
Just check the fictitious tracking number EVR1234567890GB. They have not even taken the trouble to make up a more realistic tracking number.
Recommendation:
Just delete the e-mail, don't click on any links.
Michael Fowler
Other articles by Michael Fowler:
Webmail Update Required Phishing Scam - Michael Fowler
An urgent task you must complete asap, but do you. Webmail is provided on your mail server and any updates can be implemented without any action on your part. This has all the appearance of being a phishing scam to steal your email login details to access your email account... more >>
Paypal Verification Phishing Scam - Michael Fowler
Can you spot the "red flags" of this Paypal Verification Phishing Scam? Unusual sender email address and click through web address, there are more but let's read the email first... more >>
ICANN Verification Phishing Scam - Michael Fowler
If ICANN (Internet Corporation for Assigned Names and Numbers) wished you to verify your details including email address you would be contacted using an icann.org email address or via your Domain Registrar and not by a cPanel username on your domain name. It is a phishing scam... more >>
