Fake CTT parcel text: a made-up example
Criminals send texts pretending to be CTT, the Portuguese postal service, about a parcel that is "held" until you pay a small fee. The message below is made up to show the warning signs. CTT did nothing wrong; criminals copy its name.
Example, made up
CTT: A sua encomenda PT0000000000 está retida por falta de pagamento das taxas alfandegárias (1,99 EUR). Pague em 24 horas ou será devolvida: hxxps://ctt-entrega[.]example/pagar
Example, made up
In English: "CTT: Your parcel PT0000000000 is held because customs fees (EUR 1.99) are unpaid. Pay within 24 hours or it will be returned: hxxps://ctt-entrega[.]example/pay"
The red flags
- The link doesn't go to ctt.pt, CTT's own website. A name like "ctt-entrega" is made to look official.
- A small fee (here EUR 1.99) is the bait. The real goal is your card details.
- A 24-hour deadline is there to rush you.
What to do
- Don't open the link. If you're expecting a parcel, track it on CTT's own website or app by typing the address yourself.
- If you typed in card details, call your bank straight away on the number on your card.