- phishing
- australia-post
- email-scams
Scammers are impersonating Australia Post to steal credit card details using a fake parcel notification. Learn how to spot and avoid the trap.
Fake Australia Post Email Scam Detected
MailGuard’s AI-driven detection network has intercepted a phishing campaign that impersonates Australia Post, designed to trick recipients into handing over personal and financial details. By mimicking a parcel notification, this scam preys on trust in familiar brands and exploits the urgency often associated with deliveries.
How the Scam Works
Victims receive an email appearing to be from “Australia-Post,” stating a parcel is awaiting collection. To prevent return-to-sender, users are prompted to pay a small fee of $3.38 AUD via a provided link. While the fee seems insignificant, the ultimate aim is identity theft and financial fraud.
- Sender name: Australia-Post
- Sender email: support(at)kwatch(dot)id(dot)vn
- Claim: Parcel delivery pending
- Request: Pay $3.38 AUD to complete delivery
The Spoofed Web Page
Clicking the link redirects users to a counterfeit Australia Post site, hosted on a compromised Russian domain (hoster-test.ru). The fake page closely resembles the official interface, using stolen branding and design elements to appear legitimate.
- Visual cues: Fake parcel tracking interface
- Data requested: Credit/debit card number, phone number
- Final step: One-time passcode (OTP) entry
Why It’s Dangerous
This phishing scam’s danger lies in its subtlety. The minimal payment request lowers suspicion, while the collection of OTPs enables real-time fraudulent transactions. Victims risk identity theft and unauthorised access to financial accounts.
How to Identify the Scam
MailGuard highlights several red flags that recipients should watch out for:
- Unfamiliar sender address that doesn't belong to Australia Post
- Urgent language pushing for immediate action
- Use of Australia Post branding on a non-legitimate domain
- Requests for credit card details and OTPs
- Hosting server located outside Australia
Staying Safe Online
To avoid becoming a victim of this or similar scams, MailGuard recommends:
- Deleting suspicious emails without opening links
- Never sharing personal or financial information via unknown websites
- Verifying delivery notifications directly with official postal services
- Using security software that offers real-time phishing protection
Scammers rely on urgency and trust. Stay alert, stay sceptical, and protect your information.
Comments from our readers
Scams are unbearable
It's infuriating how these scams prey on people. If only Australia Post could do more to protect us from such blatant frauds. Absolutely disgraceful!
Be careful mates
This hits home! I almost fell for a similar email last year about a parcel. Thankfully, my instinct kicked in, and I did some digging. It's scary how these scams manipulate our trust. Always double-check and stay safe online, everyone!
Parcel From Who?
Ah, brilliant! Just what I needed—a fake email from Australia Post with an urgent fee! Because who doesn’t want to pay for the privilege of 'collecting' a parcel that probably doesn't exist? Can't wait to log into my 'secure' account on the Russian internet!