In recent months, one has spread in Italy dangerous computer scam known as parcel in storage scamor even parcel blocked. The apparently simple mechanism has already emptied the bank accounts of hundreds of users, taking advantage of a well-orchestrated mix of social engineeringcounterfeit websites and deceptive messages via SMS, email or WhatsApp.
It all starts with a alarmist message which informs the recipient of the impossibility of delivering a package due to “missing information” or “uncollected stock”. The message arrives via SMS, email or messaging apps such as WhatsApp, e invites you to click on a link to resolve the problem quickly.
The content suggests actions such as “unlock the package”, “pay a customs fee”, or “reschedule the delivery”. The message appears credible because it exploits names of known couriers (such as Amazon, Poste Italiane, DHL), official logos and refined graphics, thus increasing the victim’s trust.
The clone site and the theft of bank data: this is how scammers work
Once you click on the link, you are redirected to one fraudulent web page designed for imitate perfectly the website of a courier or an e-commerce portal. Here the user is tricked into entering personal datasuch as name, address, identity document and — above all — banking informationincluding credit card number or IBAN.
Often the scam is disguised as a fake payment of a few euros (2 or 3 euros), an amount so low that it does not arouse suspicion. But it’s really just bait for get full access to your checking account or clone the card.
Once the data is obtained, scammers can:
Why this scam is so effective: Urgency makes you let your guard down
This scam works for several reasons:
In some cases they are noticeable grammatical errors, suspicious email addresses or strange web domains: signs that should raise the alarm, but often go unnoticed due to haste.
How to protect yourself from the package in storage scam
Here are some good practices to avoid falling victim to this scam:
Even banks, like BPM deskare raising alarms in this regard, specifying that “no courier asks for payments via SMS to deliver a package.”
Have you entered the data? Here’s what to do immediately to limit the damage
If you have already filled out a fraudulent form or made a payment, act promptly:
- Contact your bank or credit institution immediately: report the fraud, ask for the cards to be blocked and the suspension of outgoing transfers.
- Change all passwords and credentials immediately access to online services, email and home banking.
- Block your compromised credit or debit card and request a new issue.
- Submit a report to the Postal Policewhich in Italy is the reference for computer crimes.
- Check your bank statement regularly to intercept other possible fraudulent transactions.
- Ignore any subsequent contact: Scammers may try to contact you again pretending to offer help or refunds.
