Security and phishing

Instructions for phishing messages

Today, a high number of phishing messages are in circulation, with SmartPosti occasionally being falsely used as the sender. These messages are typically delivered via SMS or email. SmartPosti actively cooperates with law enforcement and other organizations to combat phishing attempts.

Phishing messages may seem deceptively authentic. 

• Appearance: The message may include SmartPosti’s logo, colors, or other artwork.

• Contents: The message may contain a genuine SmartPosti tracking code.  

• Channel: A fake SMS may appear in the same message thread on your phone as authentic notices of arrival, seemingly sent by the same sender.

The contents of the phishing messages vary, but often they pretend to notify you of the arrival of an item or a prize you have won. For example, messages about an incoming item may claim you need to pay additional fees for delivery or customs clearance, or they might include a link asking you to confirm your address or book a delivery time. These scams are also prevalent on platforms like Facebook Marketplace, where scammers often send fake payment links to unsuspecting users.

Here’s what to do if you have received a suspected phishing message:  

• Do not click any links in the message before confirming its legitimacy. 

• Do not reply to the message or perform the measure suggested by it.  

• Be extremely careful if you’re unsure of the sender and you’re asked to log in or to provide your personal information, bank details, or user information.  

Remember, if you have any doubts, you can always verify the message and any links with our customer service. You can also check the item tracking to make sure that the status of the item corresponds with the information in the message.

If you received a phishing message and revealed your bank details, immediately contact your bank and then report the issue to the police.

How phishing works

Typically, scams are based on phishing, i.e., the goal is to steal your personal information, user information, or bank details.  

How scammers operate:

• You receive a message that appears legitimate, containing a link and a suggested course of action.  

• Clicking the link takes you to a fake website designed to deceive—established for the purpose of the scam.  

• The site prompts you to enter personal information, like your Apple ID and/or email username and password.

• The page stores the information you provide, which the scammers use for criminal purposes.

If the message contains a download link, it’s an attempt to install a malicious application on your device, designed to steal your data.

Characteristics of messages sent by SmartPosti

SmartPosti’s notice of arrival provides key details about your package, such as the pick-up location, address, sender’s name or parcel number, depending on the notification type. SMS notifications are concise and include essential information, while email notifications provide more details.

We will never ask you for additional information or to identify yourself with your Apple ID.

SmartPosti does not send any link for the payment of a customs clearance fee or a handling fee.

For Cash on Delivery (COD) items, the notice of arrival includes a secure link for payment. These links are included in email or SMS notifications and always start with link.smartposti.lv/, followed by a string of random characters. Please note that these are the only payment links we use for COD.

Examples of scams perpetrated in SmartPosti’s name

Phishing messages can look extremely authentic, which can make them hard to recognize.

Here are common scams to watch out for:

• There are fake accounts on social media pretending to be SmartPosti. For example, these fake accounts may claim to sell items unclaimed by SmartPosti’s customers. As SmartPosti never sells its customers’ items, this is a devious attempt to phish for personal information or make money through illegal means.

• Scams related to prize draws and competitions are common. Some of the phishing messages are linked to competitions that claim to be organized by SmartPosti. In reality, they are used to phish for personal information or bank details. You can check SmartPosti’s official social media accounts to verify that the competition is truly organized by SmartPosti.

• Scammers often target people selling items on online marketplaces. For example, a seller on Facebook Marketplace may be contacted by someone posing as a buyer who claims they want the item delivered via SmartPosti. The ""buyer"" might then send a link to a fake website resembling SmartPosti, claiming it's needed to confirm the payment. This site may ask for sensitive information, such as Smart-ID PINs, under the pretense of processing the transaction.

• Be cautious of any unexpected links or requests for personal or banking information. SmartPosti will never ask for your Smart-ID PINs or other sensitive details. If you suspect something is off, stop immediately and contact customer service for guidance. Stay alert to keep your transactions safe!