The Postal-Courier Con

CTM360’s latest investigation reveals a striking surge in postal and courier phishing scams—over 50,000 fraudulent URLs detected in the past three months, targeting 48 global international and national brands, including DHL, UPS, and Aramex. These campaigns exploit delivery-related trust and urgency, powered by Phishing‑as‑a‑Service tools, smishing via RCS and iMessage, and advanced evasion tactics like cloaking, bot redirections, and dynamic updates.

Many of these scams are regionally tailored with multilingual templates, and are increasingly amplified by GenAI‑powered phishing pages and real‑time data exfiltration. This rapidly evolving threat underscores the need for continuous, intelligent monitoring and swift incident response.

Read the full report here — and explore all of CTM360’s latest insights and threat intelligence.