Is IPS Delivery Pending text a SCAM?
IPS Delivery Pending text is a an electronic “phishing” scam used to trick users into providing personal/sensitive information or to access their private data. Attackers try to trick people into believing that their shipment was not delivered, for various reasons. The goal of the scammers is to lure victims into clicking on a fake link in the message, which is presented as a way to order re-delivery. The scam can lead to credit or debit card fraud, big loss of money and further phishing attacks.
Scammers use SMS text messages to promote the IPS Delivery Pending Scam and get new victims. In addition, the scam can be promoted through email, social networks (Facebook, YouTube, Twitter, Instagram), deceptive ads and push notifications, as well as Adware and potentially unwanted applications (PUAs).
Here’s an example of a scam text claiming to be sent by IPS (International Parcel Service Text Notification):
An International Parcel Service Scam Text:
Shipment attempt 2/2 – Vanessa Pretoruis, ltem-lPS208497103ZA needs your attention, and will be returned, if not confirmed: igadez.com/qpKzERN
QUICK LINKS
- Is IPS Delivery Pending text a SCAM?
- How Does the IPS Delivery Pending Scam Work?
- How to Spot Scams That Mimic the IPS?
- What to do when you receive the IPS SCAM text?
- Report IPS Scam
How Does the IPS Delivery Pending Scam Work
The scam contains a message about package delivery failure, which scammers try to pass off as legitimate. The scammers trick users into ordering a new delivery by clicking on the link in the message. Clicking on the link opens a site that pretends to be the official IPS site.
The phishing site is designed to look like the IPS real website. It may even link to the official site and may use the same logo and graphics.
A fake IPS site (igadez.com):
The text of the phishing page is below:
DELIVERY PENDING
You have an outstanding delivery. Use your
unique tracking code to track and receive your
itemYour tracking code
IPS208497103ZA
Typically, Scammers ask victims to divulge their personal information and card details to pay for re-delivery. This information can be used for identity fraud, to conduct unauthorized financial transactions and make fraudulent purchases, to sell to criminals on the dark web, or other malicious purposes. Moreover, the criminals behind this scam can use stolen email addresses and phone numbers to send spam and malspam (spam emails containing malware or links to malware).
VirusTotal flagged an IPS Delivery Pending SCAM site as malicious
While less likely, scammers may ask victims to call a given number. Scammers may try to trick victims into purchasing fake support services or installing a remote control tool, which they pretend to be a program to diagnose a computer. It is important to understand that having access to a computer, scammers can steal private information and personal files, install malware (spyware, ransomware or Trojan horses).
To summarize, the IPS Delivery Pending text is a SCAM. It can lead to loss of data, financial losses, theft of personal information and other serious problems.
Here’s another example of a scam text claiming to be sent by International Parcel Service:
DELlVERY ALERT (!): consignment #LN78748371662ZA is ready for pick-up in: Mamelodi. Martha, check where to receive it here: odazoj.com
Below is another fake International Parcel Service website (splendidgift.live):
The text of the phishing page:
Consegnamo.
Grandi in Europa. Collegato al mondo.
CONSEGNA DEL PACCO IN
SOSPESOHai (1) pacco in attesa di consegna, Usa il tuo codice per
rintracciarlo e riceverloIl tuo codice di rintracciamento
GLS910029334
How to Spot Scams That Mimic the IPS
There are always a few details that can give away a scam. Make sure you know what to look out for.
- If you receive a text asking for redelivery fees, don’t respond or click on any links. Stop and think. An unexpected text message is often the first sign of a scam. Scammers use this tactic to harvest your personal information.
- The most obvious way how to spot a fake International Parcel Service text is finding inconsistencies in domain names, phone numbers and email addresses. If the text claims to be from the IPS, but the message is being sent from a random phone number or email address, it’s probably a scam.
- Copy the tracking code from the text message, track it on the International Parcel Service tracking page
- If you have the slightest suspicion a text may be a scam, do not click on the links you see.
- The text message creates a sense of urgency. Creating a false sense of urgency is a common trick of phishing scams. Be suspicious of texts that claim you must call or click a link immediately.
Examples of such scams
The IPS Delivery Pending Scam is just one of the many types of scams that exist. In some emails and text messages, scammers use threats to intimidate and bully a victim into paying, others contain links to malicious files. Whatsapp Scam, US9514961195221 – Your Package Cannot Be Delivered – USPS Scam, Geek Squad EMAIL SCAM 2023, Norton Subscription Has Expired and DPD Delivery Email are some of the scams we reported recently.
What to do when you receive the IPS Delivery Pending Scam text
We advise everyone who receives this text to follow a few simple steps below.
- Do not believe this message.
- Do not pay a ‘redelivery’ fee.
- If there’s a link in the scam message, do not click it, otherwise you could unwittingly install malware or ransomware on your device.
- Report the IPS scam text to the FTC at https://www.ftc.gov/
- If you have paid a scammer, the sooner you act, the better. Use the steps (https://consumer.ftc.gov/articles/what-do-if-you-were-scammed) to try to stop a transaction, get a transaction reversed, or get a refund.
Threat Summary
Name | IPS Delivery Pending Scam, International Parcel Service Scam |
Type | Phishing, Scam, Social Engineering |
Fake Claims | DELlVERY ALERT (!); Consignment is ready for pick-up; Shipment attempt 2/2; Shipment needs your attention; Shipment will be returned, if not confirmed; You have an outstanding delivery |
Fake tracking numbers | GLS910029334, LN78748371662ZA, lPS208497103ZA, IPS016448296CA, P0135920134-ZA |
Fake Linkt sites | uppf.me, oppq.me, gbck.me, xaqp.me, bgxeeu.com, jtvf.me, bzob.me, pdlz.me, vvqq.me, track.fwdtrck.com, twbn.me, jmht.me, bgxeeu.com, xaqp.me, ukzd.me, splendidgift.live, oxajub.com, iduzol.com, owafad.com, www.yourplaygames.com, igadez.com, esilif.com, ohodiv.com, iduzol.com, oxajub.com, ufekij.com, www.onegamesservices.com, www.prizeosaurus.com, www.interwebsalesrus.com, www.securepagenow.com |
Damage | serious privacy issues, identity theft, financial losses, additional malware infections |
Distribution methods | SMS spam campaigns |
Report a Scam
If you have received the IPS Delivery Pending SCAM text or a message that is similar but not the same as the example above, then post it as comment on this article. Please include the telephone number the text came from. This helps us to warn users about current scams, monitor trends and disrupt scams where possible.
Shipment attempt 2/2 – ltem-lPS208497103ZA needs your attention, and will be returned, if not confirmed: qxji.me/Znt7wY
No.: +27 83930036520290
Yep, got an IPS scam Email this morning. I will be reporting it and deleting it right away
i had a message today saying I had a package and it will cost £2 delivery charge scammers really get on my nerves don’t know how they can sleep at night here’s the tracking number I was given IPS477978901UXK
IPS799885953SGC
This was sent to me
Just received an sms from 0820072381 Text msg IPS811184720ML0 consignment at pick up point. More info zmkfa.com/ZEIu6b. Frist I needed to google to see if this is legit and found this info that it is a scam. Thanks for the warning
Shipment attempt 1/2 – ltem-lPS208497103ZA needs your attention, and will be returned, if not confirmed: uqov.info/ZfuH5D
+279609801001414
Seems we are getting the same item; Shipment attempt 1/2 – ltem-lPS208497103ZA needs your attention, and will be returned, if not confirmed:brlw.info/ZfYA1R
iOS gave me this exact same fake thing with the tracking number that matched exactly listed about. Sayun
Nomfundo, Your order was found in: Durban. Today at 09:42 locate below, info: aisjh.com/ZRYO2T
Shipment attempt 2/2 – ltem-lPS208497103ZA needs your attention, and will be returned, if not confirmed: wupt.me/Z7Jc34
+27820048099
IPS track order lPS409171205QR: here cunb.me/Z77lek received yesterday
+27820048099
From IPS:
Track your order now, IPS409171205QR here:
jzaq.me/Z7Bqi0
Shipment attempt 2/2 – ltem-lPS208497103ZA needs your attention, and will be returned, if not confirmed: jzaq.me/ZM9cCO
+27820048099
Shipment attempt 1/2 for: Karen, please confirm your delivery details, otherwise your Item will be returned: amrg.me/ZMbbry
The scary thing is that I am actually waiting for a parcel from USA, so how would I know this is a scam???
Hello, your parcel was delivered on 29-09-2023 at the delivery point. Please check here where you can pick up your parcel: lgku.me/ZFFrAM
+27811600010
The problem is that this number is also a number from which I have received legitimate messages and OTPs (Mweb)
Hello, your parcel was delivered on 17-10-2023 at the delivery point. Please check here where you can pick up your parcel: wssb.me/ZJFpO2
—-
Shipment attempt 2/2 – ltem-208497103 needs your attention, and will be returned, if not confirmed: cyxj.me/ZWtnrb
—
It’s your last chance – item-208497103 needs to be confirmed before it’s returned. byef.me/ZWNCxW