FRAUDULENT SCHEME TARGETING SHIPPERS OF HIGH VALUE ITEMS.

retirednow

I though I share this bulletin I received today from Ship And Insure ( an insurance group)

"Ship and Insure and the North American Collectibles Association have recently become aware of a fraudulent scheme targeting shippers of high value items. Thieves are obtaining shipping data of packages and calling in to Carriers to request that specific packages be rerouted to be ‘held for pickup’.

The thieves then produce ID matching the name on the label and disappear with the package. We are now strongly recommending all customers request a restriction on their respective accounts with Carriers to not allow any rerouting of packages. "

291fifth

The criminals never sleep.

percyb

@291fifth said:
The criminals never sleep.

Evil seems to be pervasive.

logger7

I've never heard of shippers willingly rerouting parcels except in emergencies with a lot of proof. And their cybercrime and and trust and safety department strike me as paranoid and unwilling to do anything that could jeopardize their jobs.

ricko

I am really surprised that it could be that easy (easy is a relative term in this case) to achieve a rerouting of a package. What kind of ID would they be able to provide that would be acceptable? Not doubting that it is happening, just curious about the details. Cheers, RickO

PerryHall

@ricko said:
I am really surprised that it could be that easy (easy is a relative term in this case) to achieve a rerouting of a package. What kind of ID would they be able to provide that would be acceptable? Not doubting that it is happening, just curious about the details. Cheers, RickO

As a minimum, I would think that the criminals would need the name and address of the shipper and the recipient and the tracking number.

lermish

@retirednow said:

Thieves are obtaining shipping data of packages and calling in to Carriers to request that specific packages be rerouted to be ‘held for pickup’.

@PerryHall said:

@ricko said:
I am really surprised that it could be that easy (easy is a relative term in this case) to achieve a rerouting of a package. What kind of ID would they be able to provide that would be acceptable? Not doubting that it is happening, just curious about the details. Cheers, RickO

As a minimum, I would think that the criminals would need the name and address of the shipper and the recipient and the tracking number.

Totally agree @PerryHall , I think this is more of a data security issue. Probably a buyer's email is hacked and shipping info taken there or lax security measures by shippers. This entire issue likely falls into the avoid phishing arena.

Also @logger7 , I reroute my FedEx packages (usually from our hosts) nearly every time as there is a FedEx store across the street from my work. It's very simple and routine.

BStrauss3

"Good" social engineers are very very good at what they do. Bad ones are unsuccessful and you won't hear about them.

JimTyler

@BStrauss3 said:
"Good" social engineers are very very good at what they do. Bad ones are unsuccessful and you won't hear about them.

I use to say something like that when I was a parole officer. I have dumbasses on my caseload, the smart ones don’t get caught.

logger7

And like coin doctors, they don't share their secrets, why should they?