HackproofHacks

Technique

Scammers use fake delivery messages to steal your money

Malwarebytes Labs covered this technique on Sep 18, 2026. Below is a plain-English breakdown of what it is, how it actually works, and whether it matters, written for people who are curious about hacking and security but don't have a technical background.

Malwarebytes Labs · Sep 18, 2026

In plain words

Think of it like someone knocking on your door saying they have a package for you, but first they need some information from you to confirm who you are. In plain words, scammers are sending fake messages that look like they are from parcel delivery companies¹, asking you to pay a small fee or promising a refund, and then stealing your personal and financial information.

How it actually works

The scammers use phishing² messages to impersonate familiar couriers, like a fake email or text message that looks real, to trick you into giving them your card and bank details³. They might say you need to pay a small fee to get your package, or that you are getting a refund and they need your information to process it.

What it means for defenders

To defend against this, be careful when you get messages about parcel deliveries, and never give out your personal or financial information unless you are sure it is a real message from the delivery company. If you are unsure, you can always contact the delivery company directly to check if the message is real.

Terms

¹ parcel delivery companies
, a company that delivers packages
² phishing
, a type of scam where someone tries to trick you into giving them your personal information
³ card and bank details
, the numbers and codes that let you use your bank account or credit card

Learn the fundamentals

Want to understand the concepts behind this item? These in-depth HackproofHacks guides explain the underlying techniques from the ground up.

About this explainer

KeepLooped tracks the newest offensive-security tools, techniques, vulnerabilities and research from 80+ trusted sources and turns the most important items into plain-language explainers, so people learning security can keep up without a technical background. This page summarises and explains the source linked below; it was produced with AI assistance and is meant as a beginner-friendly starting point. Always confirm specifics, versions, CVE details, and exploitation status, against the original source and official advisories. Curated and published by HackproofHacks.