Fake shipment tracking SMS phishing campaign
Campaign
Summary
Hide ▲
Show ▼
A global surge in fake shipment tracking phishing campaigns is stealing funds and credentials at scale, with activity rising from almost none in 2024 to over 100 campaigns a month in 2025. The scams use SMS phishing, sender ID spoofing, and fake tracking sites to impersonate parcel delivery services. Some of the activity overlaps with Darcula, a Chinese-language PhaaS platform used in over 100 countries. Victims who follow the prompts to update details or pay small fees are pushed into pages that collect personal and financial information.
Related Happenings
Pre-World Cup 2026 fraud surge across partner spoofing, fake sportsbook apps, and travel domains
Trend
H score31
First: 30.06.2026 14:30
Last: 30.06.2026 14:30
Sources 1
About this happening:
**Pre-tournament fraud** around **FIFA World Cup 2026** intensified across **partners, sportsbook users, and travel buyers**, raising the risk of impersonation, payment diversion,...
Pre-World Cup 2026 fraud surge across partner spoofing, fake sportsbook apps, and travel domains
TrendAbout this happening: **Pre-tournament fraud** around **FIFA World Cup 2026** intensified across **partners, sportsbook users, and travel buyers**, raising the risk of impersonation, payment diversion,...
FBI public service announcement on fake FIFA websites
Public Sector Action
H score21
First: 28.05.2026 22:08
Last: 28.05.2026 22:08
Sources 1
About this happening:
The **FBI** and security researchers warn that **FIFA-themed fraud** is already targeting **World Cup 2026** fans ahead of the **June 11 kickoff**. Reported activity includes **mo...
FBI public service announcement on fake FIFA websites
Public Sector ActionAbout this happening: The **FBI** and security researchers warn that **FIFA-themed fraud** is already targeting **World Cup 2026** fans ahead of the **June 11 kickoff**. Reported activity includes **mo...
Ghost Stadium FIFA World Cup fraud campaign
Campaign
H score41
First: 27.05.2026 14:28
Last: 27.05.2026 14:28
Sources 1
About this happening:
A **Ghost Stadium**-linked **FIFA impersonation fraud campaign** is targeting **2026 FIFA World Cup** fans with cloned **fifa.com** pages, fake ticket and hospitality offers, and...
Ghost Stadium FIFA World Cup fraud campaign
CampaignAbout this happening: A **Ghost Stadium**-linked **FIFA impersonation fraud campaign** is targeting **2026 FIFA World Cup** fans with cloned **fifa.com** pages, fake ticket and hospitality offers, and...
Phantom Stealer Europe phishing campaign
Campaign
H score33
First: 31.03.2026 17:00
Last: 31.03.2026 17:00
Sources 1
About this happening:
A **sustained phishing campaign** delivered **Phantom Stealer** to organizations in **logistics, manufacturing and technology** across **Europe**, creating a broad credential-thef...
Phantom Stealer Europe phishing campaign
CampaignAbout this happening: A **sustained phishing campaign** delivered **Phantom Stealer** to organizations in **logistics, manufacturing and technology** across **Europe**, creating a broad credential-thef...
Ongoing Dropbox credential-theft phishing campaign
Campaign
H score37
First: 03.02.2026 12:55
Last: 03.02.2026 12:55
Sources 1
About this happening:
An **ongoing phishing campaign** is stealing **Dropbox credentials** from corporate users and can enable **account takeover** and follow-on fraud. The operation uses **urgent-busi...
Ongoing Dropbox credential-theft phishing campaign
CampaignAbout this happening: An **ongoing phishing campaign** is stealing **Dropbox credentials** from corporate users and can enable **account takeover** and follow-on fraud. The operation uses **urgent-busi...
Timeline
-
16.03.2026 16:45 2 articles · 3mo ago
Global fake shipment tracking phishing surge disclosed
Initial DisclosureGroup-IB described a global surge in fake shipment tracking phishing campaigns that abuse parcel delivery messages, lookalike domains, sender ID spoofing, and fake tracking pages to steal credentials and funds from parcel delivery customers; the researchers said the activity rose sharply through 2025, with over 100 campaigns almost every month and peaks in June and December 2025, and noted that some sites shared infrastructure commonly associated with Darcula.
Show sources
- Researchers Warn of Global Surge in Fake Shipment Tracking Scams — www.infosecurity-magazine.com — 16.03.2026 16:45
- Researchers Warn of Global Surge in Fake Shipment Tracking Scams — www.infosecurity-magazine.com — 16.03.2026 16:45