"Enter your tracking number": Beware of this phishing scam

This is how you protect yourself

You should currently protect yourself from e-mail attacks with the theme of "track your package". In this case, you will be informed of the suspected win and should disclose personal data. We will tell you why email is just a phishing attempt.

Check it in your mailbox, you can probably track an unknown package. At first glance, this may surprise you, which is obviously good news. As the body of the unknown email shows, you have won a game, and the attractive price has already approached you. Before that, you should identify yourself on the website.

Mail with the subject "Track your package" or "Enter your tracking number" will be forwarded to us several times a day in April. Obviously, they are the new version of the scam we reported in April. At the time, the theme used by criminals was "Congratulations! You are the winner of our XY contest". However, the fraudulent content of email is almost the same:

Hello there username,
Congratulations! You are attracted as the winner of our monthly LILI draw
Click the link below to find the price for this month.
Confirm your identity and then indicate where we should send your price.
Our entire LIDL team will warmly congratulate you!
click here

It is clearly recommended that you should only confirm your identity to receive prizes. Even if the offer is tempting, you should never do this. Because despite the real logo, these emails are not from Lidl or other supermarkets. You can clearly see this from the sender's email address. The corresponding supermarket is not shown here, and the website behind it is also fake.

Hide behind suspicious links

Using false information and a secure browser, we risked visiting fraudulent websites behind links. Here, we target multiple websites, and then key information should be disclosed. But look for yourself:

This is how phishing scams steal your data

The way to make private data public is reminiscent of reputable online stores and trusted online competition. In addition, no ads or suspicious pop-ups will appear, which means careless victims may not be suspicious. More importantly, the credit card number, including the check number and expiration date, must also be queried. After all, this can already be used to debit large sums over the Internet.

What should I do with fake emails?

Unfortunately, phishing email is part of the Internet, such as Google and Facebook. Therefore, you should learn how to deal with them. Just delete the fake emails and forward them to the following email addresses in advance:

You will help us understand the new scam and report it. If you want to learn about new phishing nets and other safety news, please subscribe to Netzwelt on Facebook and Twitter. You can also find all reports on this topic in our current fraud warning.

Watch now