Chega um SMS ou e-mail se passando pelos Correios Suíços, pela DPD ou pela alfândega, dizendo que uma encomenda está retida por causa de uma taxinha não paga. O link leva a uma página de pagamento falsa que rouba os dados do teu cartão. As iscas giram em torno da Post, da DPD e da alfândega suíça, e existe até uma plataforma da Confederação, a antiphishing.ch, pra derrubar esses sites desde 2014.

Como o golpe funciona

1. Chega um SMS, iMessage, RCS ou e-mail: uma encomenda está retida por uma taxinha de alfândega ou de reentrega (tipo CHF 1,99).
2. Um link leva a uma cópia quase perfeita do site dos Correios Suíços ou da DPD.
3. Tu digitas nome, endereço e todos os dados do cartão de crédito pra 'pagar' a taxinha.
4. Na variante do 'phishing duplo', os golpistas depois te ligam fingindo ser o banco pra tirar o código de confirmação do cartão.
5. Aí o cartão é usado em compras fraudulentas ou cai numa armadilha de assinatura recorrente.

Sinais de alerta

• Um pedido de 'taxa' de entrega por uma encomenda que tu nem esperavas, com urgência.
• Um link pra um endereço que não é o site verdadeiro da transportadora.
• Pedido dos dados completos do cartão ou de um código de confirmação/2FA pra 'liberar' a encomenda.
• Uma ligação depois, pedindo que tu confirmes um código que acabou de chegar.

Como se proteger

• Nunca digites os dados do cartão a partir de um link de aviso de encomenda; vai direto ao site ou app oficial da transportadora.
• Transportadoras e bancos de verdade nunca pedem teu código 2FA/de confirmação por telefone.
• Confere o rastreio só pelo app oficial ou por um número que tu mesmo digitaste.
• Encaminha mensagens suspeitas pra reports@antiphishing.ch.

Es kommt ein SMS oder E-Mail im Namen der Post, von DPD oder dem Zoll, das behauptet, ein Paket sei wegen einer kleinen unbezahlten Gebühr zurückgehalten. Der Link führt zu einer gefälschten Zahlungsseite, die Deine Kartendaten stiehlt. Die Köder drehen sich um die Post, DPD und den Schweizer Zoll, und es gibt sogar eine Plattform des Bundes, antiphishing.ch, die solche Seiten seit 2014 vom Netz nimmt.

So funktioniert die Masche

1. Es kommt ein SMS, iMessage, RCS oder E-Mail: Ein Paket sei wegen einer kleinen Zoll- oder Wiederzustellgebühr zurückgehalten (etwa CHF 1.99).
2. Ein Link führt zu einer fast perfekten Kopie der Website der Post oder von DPD.
3. Du gibst Name, Adresse und alle Kreditkartendaten ein, um die kleine Gebühr zu 'bezahlen'.
4. Bei der Variante 'doppeltes Phishing' rufen die Betrüger Dich danach an und geben sich als Bank aus, um den Bestätigungscode der Karte zu erhalten.
5. Dann wird die Karte für betrügerische Zahlungen genutzt oder in eine Abo-Falle mit wiederkehrenden Zahlungen eingeschrieben.

Warnsignale

• Eine 'Gebühr' für die Zustellung eines Pakets, das Du gar nicht erwartet hast, mit Dringlichkeit.
• Ein Link zu einer Adresse, die nicht die echte Website des Transporteurs ist.
• Die Bitte um alle Kartendaten oder einen Bestätigungs-/2FA-Code, um das Paket 'freizugeben'.
• Ein Anruf danach, der Dich bittet, einen gerade erhaltenen Code zu bestätigen.

So schützt du dich

• Gib nie Kartendaten über einen Link in einer Paketbenachrichtigung ein; geh direkt zur offiziellen Website oder App des Transporteurs.
• Echte Transporteure und Banken fragen nie per Telefon nach Deinem 2FA-/Bestätigungscode.
• Prüf die Sendungsverfolgung nur über die offizielle App oder eine Nummer, die Du selbst eingegeben hast.
• Leite verdächtige Nachrichten an reports@antiphishing.ch weiter.

An SMS or email arrives posing as Swiss Post, DPD or customs, claiming a parcel is held over a small unpaid fee. The link leads to a fake payment page that steals your card details. The lures centre on Swiss Post, DPD and Swiss customs, and there's even a federal platform, antiphishing.ch, that has taken such sites down since 2014.

How the scam works

1. An SMS, iMessage, RCS or email arrives: a parcel is held over a small customs or redelivery fee (say CHF 1.99).
2. A link leads to a near-perfect copy of the Swiss Post or DPD website.
3. You enter name, address and all your credit-card details to 'pay' the tiny fee.
4. In the 'double phishing' variant, the scammers then call you posing as the bank to get the card's confirmation code.
5. The card is then used for fraudulent purchases or enrolled in a recurring subscription trap.

Warning signs

• A delivery 'fee' request for a parcel you weren't even expecting, with urgency.
• A link to an address that isn't the carrier's real website.
• A request for your full card details or a confirmation/2FA code to 'release' the parcel.
• A follow-up call asking you to confirm a code you just received.

How to protect yourself

• Never enter card details from a link in a parcel notification; go straight to the carrier's official website or app.
• Real carriers and banks never ask for your 2FA/confirmation code by phone.
• Check tracking only via the official app or a number you typed in yourself.
• Forward suspicious messages to reports@antiphishing.ch.

Llega un SMS o correo que se hace pasar por Correos Suizos, DPD o la aduana, y dice que un paquete está retenido por una pequeña tasa impaga. El enlace lleva a una página de pago falsa que roba los datos de tu tarjeta. Los cebos giran en torno a Correos, DPD y la aduana suiza, y existe incluso una plataforma de la Confederación, antiphishing.ch, que retira esos sitios desde 2014.

Cómo funciona la estafa

1. An SMS, iMessage, RCS or email arrives: a parcel is held over a small customs or redelivery fee (say CHF 1.99).
2. A link leads to a near-perfect copy of the Swiss Post or DPD website.
3. You enter name, address and all your credit-card details to 'pay' the tiny fee.
4. In the 'double phishing' variant, the scammers then call you posing as the bank to get the card's confirmation code.
5. The card is then used for fraudulent purchases or enrolled in a recurring subscription trap.

Señales de alerta

• A delivery 'fee' request for a parcel you weren't even expecting, with urgency.
• A link to an address that isn't the carrier's real website.
• A request for your full card details or a confirmation/2FA code to 'release' the parcel.
• A follow-up call asking you to confirm a code you just received.

Cómo protegerte

• Never enter card details from a link in a parcel notification; go straight to the carrier's official website or app.
• Real carriers and banks never ask for your 2FA/confirmation code by phone.
• Check tracking only via the official app or a number you typed in yourself.
• Forward suspicious messages to reports@antiphishing.ch.

Un SMS ou un e-mail arrive au nom de la Poste suisse, de DPD ou de la douane, prétendant qu'un colis est retenu pour une petite taxe impayée. Le lien mène à une fausse page de paiement qui vole les données de ta carte. Les appâts tournent autour de la Poste, de DPD et de la douane suisse, et il existe même une plateforme de la Confédération, antiphishing.ch, qui fait retirer ces sites depuis 2014.

Comment l'arnaque fonctionne

1. An SMS, iMessage, RCS or email arrives: a parcel is held over a small customs or redelivery fee (say CHF 1.99).
2. A link leads to a near-perfect copy of the Swiss Post or DPD website.
3. You enter name, address and all your credit-card details to 'pay' the tiny fee.
4. In the 'double phishing' variant, the scammers then call you posing as the bank to get the card's confirmation code.
5. The card is then used for fraudulent purchases or enrolled in a recurring subscription trap.

Signaux d'alerte

• A delivery 'fee' request for a parcel you weren't even expecting, with urgency.
• A link to an address that isn't the carrier's real website.
• A request for your full card details or a confirmation/2FA code to 'release' the parcel.
• A follow-up call asking you to confirm a code you just received.

Comment te protéger

• Never enter card details from a link in a parcel notification; go straight to the carrier's official website or app.
• Real carriers and banks never ask for your 2FA/confirmation code by phone.
• Check tracking only via the official app or a number you typed in yourself.
• Forward suspicious messages to reports@antiphishing.ch.

Arriva un SMS o un'e-mail che si spaccia per la Posta svizzera, DPD o la dogana, sostenendo che un pacco è trattenuto per una piccola tassa non pagata. Il link porta a una falsa pagina di pagamento che ruba i dati della tua carta. Le esche ruotano attorno alla Posta, DPD e la dogana svizzera, e c'è persino una piattaforma della Confederazione, antiphishing.ch, che rimuove questi siti dal 2014.

Come funziona la truffa

1. An SMS, iMessage, RCS or email arrives: a parcel is held over a small customs or redelivery fee (say CHF 1.99).
2. A link leads to a near-perfect copy of the Swiss Post or DPD website.
3. You enter name, address and all your credit-card details to 'pay' the tiny fee.
4. In the 'double phishing' variant, the scammers then call you posing as the bank to get the card's confirmation code.
5. The card is then used for fraudulent purchases or enrolled in a recurring subscription trap.

Segnali d'allarme

• A delivery 'fee' request for a parcel you weren't even expecting, with urgency.
• A link to an address that isn't the carrier's real website.
• A request for your full card details or a confirmation/2FA code to 'release' the parcel.
• A follow-up call asking you to confirm a code you just received.

Come proteggerti

• Never enter card details from a link in a parcel notification; go straight to the carrier's official website or app.
• Real carriers and banks never ask for your 2FA/confirmation code by phone.
• Check tracking only via the official app or a number you typed in yourself.
• Forward suspicious messages to reports@antiphishing.ch.