How the Scam Works:
You receive an email message that appears to be a shipping notification. It says that the postal service has been unable to deliver your package. To claim it, you just need to download the attached confirmation form and take it to your local post office.
But when you click on the file, you find that it isn't a receipt after all. It's really a virus! Typically, these viruses phish for personal and banking information on your machine.
Like all scams, this one has many variations. Victims have reported receiving phone calls also claiming to alert you to an undelivered package. Instead of a virus, scammers try to phish for personal and banking information. The scam isn't even limited to the USPS; Canada Post was targeted by a similar scam.
Tips to Avoid Email Scams:
Spot common email scams by following these tips:
1. Don't believe what you see. Scammers make emails appear to come from a reputable source. Just because it looks like an "@usps.com" address does not mean it's safe.
2. Be wary of unexpected emails that contain links or attachments. As always, do not click on links or open the files in unfamiliar emails.
3. Beware of pop-ups. Some pop-ups are designed to look like they've originated from your computer. If you see a pop-up that looks like an anti-virus software but warns of a problem that needs to be fixed with an extreme level of urgency, it may be a scam.
4. Watch for poor grammar and spelling. Scam emails often are riddled with typos.
5. Immediate action is necessary. Scam emails try to get you to act before you think by creating a sense of urgency. Don't fall for it.