FedEx is a global postal company. It's not surprising that emails from them are in English. However, this is a phishing attempt!

The corresponding email looks like this:

Screenshot mimikama.org
Screenshot mimikama.org

Subject: Track Your Package – FedEx

“Dear Customer,

Your package has been returned to the FedEx office.
The reason for the return is – payment of shipping costs.
the landed cost of your shipment is not paid yet so you will be charged to pay handling cost 04.5 USD , You have a period of 72 hours to recover your package, otherwise it will be returned to the sender.

Enter your tracking number to track and pay
Shipment Tracking Numbers:

·                    780032194102

Click here to view the status of your order
fedex.com/apps/fedextrack/?action=track

best regards

FedEx”

According to this email, it appears that a package from overseas could not be delivered because the transport costs still had to be paid. To do this, you should click on a link that only looks like a link to the official FedEx site.

Display the link

The sender of the email looks real, but this is also easy to fake. If you don't dare to click on a link, it is usually enough to move the mouse cursor over a link so that it appears below.
Here is an example of what this looks like with the “Thunderbird” mail client:

Screenshot mimikama.org
Screenshot mimikama.org

As you can see, the link leads to a page where the URL has been shortened, which is suspicious in itself.

The actual link then leads to a page that only remotely has anything to do with FedEx:

Screenshot mimikama.org
Screenshot mimikama.org

We were also able to determine that the page had only existed for 1 day and that the creator of the page had been anonymized.

Screenshot mimikama.org
Screenshot mimikama.org

At this point, the phishing page where you had to enter your data has already been deleted. However, the folders and the domain still exist, so a new phishing page will most likely appear there soon asking for sensitive user data.

Update 9/20/18 8:00 p.m

As expected, there is now a page under the link that looks like the FedEx page.

Screenshot mimikama.org
Screenshot mimikama.org

If you then enter the number from the email in good faith (although any other number also works), the actual phishing trap occurs: the data is requested, which of course does not end up with FedEx, but with fraudsters who can misuse this data .

Screenshot mimikama.org
Screenshot mimikama.org

Rule of thumb

If you have any doubts about certain emails, always look directly at a company's website and log in from there, in the case above, on the real FedEx website .


If you enjoyed this post and value the importance of well-founded information, become part of the exclusive Mimikama Club! Support our work and help us promote awareness and combat misinformation. As a club member you receive:

📬 Special Weekly Newsletter: Get exclusive content straight to your inbox.
🎥 Exclusive video* “Fact Checker Basic Course”: Learn from Andre Wolf how to recognize and combat misinformation.
📅 Early access to in-depth articles and fact checks: always be one step ahead.
📄 Bonus articles, just for you: Discover content you won't find anywhere else.
📝 Participation in webinars and workshops : Join us live or watch the recordings.
✔️ Quality exchange: Discuss safely in our comment function without trolls and bots.

Join us and become part of a community that stands for truth and clarity. Together we can make the world a little better!

* In this special course, Andre Wolf will teach you how to recognize and effectively combat misinformation. After completing the video, you have the opportunity to join our research team and actively participate in the education - an opportunity that is exclusively reserved for our club members!


Notes:
1) This content reflects the current state of affairs at the time of publication. The reproduction of individual images, screenshots, embeds or video sequences serves to discuss the topic. 2) Individual contributions were created through the use of machine assistance and were carefully checked by the Mimikama editorial team before publication. ( Reason )