The Finnish postal firm Posti has warned people of fraudulent messages sent by phishers apparently sent from actual Posti phone numbers. The text messages have falsely claimed that a recipient's package has arrived and requested confirmation of a customs fee through a provided link.
The company first learned of the abuse of their text message number last spring, according to Heikki Horn, Posti's Head of Security.
"We have discussed the issue with authorities and operators. Operators are seeking technical solutions to prevent scammers from altering the incoming message number," Horn said.
Horn emphasised that the situation can be distressing for customers, especially when they are genuinely expecting a package from abroad.
To ensure the legitimacy of any customs fee request, Posti advises customers to verify the matter through the OmaPosti online service or by contacting its customer service. The tracking number will indicate whether a genuine customs fee has been assigned to the shipment.
"If someone has provided their bank details through a fraudulent link, they should contact their bank and the police," Horn noted.
Earlier this year, attempts to gain access to people's bank details were made by sending seemingly authentic emails with Posti's colours and logos. More recently, the Finnish Transport and Communications Agency's Cyber Security Centre also issued a warning about calls from phone numbers that appear to be domestic but are actually from abroad and used for scam calls.