Fake Shipment Tracking Scams Surge In MEA, Targeting Residents Awaiting Deliveries

(MENAFN- Khaleej Times) Residents waiting for parcel deliveries are being increasingly targeted by cybercriminals using fake shipment tracking messages, as one of the most prevalent phishing scams spreads across the Middle East and Africa, according to research by cybersecurity company Group-IB.

The study found that cybercriminals are exploiting the ‘modern-day essential service’ of courier delivery and are running a coordinated campaign using Sender ID spoofing and real-time keylogging to steal personal information, banking credentials, and OTPs

Recommended For You

The firm reported a growth in fake shipment tracking scams throughout 2025 and early 2026, driven by what is known as Phishing-as-a-Service (PhaaS) platforms. These PhaaS platforms use phishing“kits” or tools that are often sold to other cybercriminals to make it easier to launch sophisticated phishing campaigns.

** Stay up to date with the latest news. Follow KT on WhatsApp channels.**

Group-IB said that while the operation has been widespread across multiple countries around the world, the Middle East and Africa regions have seen significant activity between December 2025 and February 2026, with Egypt and South Africa being the top affected countries.

** How does the scam work?**

An unsuspecting victim would receive an anonymous SMS claiming that a delivery has failed or a package has returned, prompting them to“update address information” or“pay handling fees” via a link.

When clicked, the link would then lead to a phishing page designed to look official. Group-IB’s technical analysis revealed that attackers used WebSockets which allowed them to log sensitive information, like card numbers, CVVs, and OTPs, in real time as the victim types them in.

Attackers have also used illegal SMS gateways to merge fraudulent messages into legitimate message threads from trusted postal services, making them nearly indistinguishable from genuine communications.

Because online shopping and logistic services are deeply embedded in everyday activities, the scam affects a broad segment of the population. However, postal and delivery services are disproportionately targeted, followed by financial services, telecommunications, mobility services, and e-commerce platforms, according to Group-IB.

Suggestions for protecting oneself:

1. Manually verifying a link, especially sent via WhatsApp or SMS. It is always best to visit the courier’s official website and inputting the tracking number there.

2. Checking the sender’s number. Real delivery companies don’t use random mobile numbers or private email addresses.

3. And always be suspicious of urgency. If a message demands immediate payment for an“address update”, it is likely to be a scam.

4. Look for domain red flags, like using random letters in the extension. Scammers typically use low-cost, disposable extensions like,.sbs,.top, and.

5. Report suspicious activity and forward scam messages to authorities to help protect yourself and the wider community.

Aramex, the Emirati logistics and delivery company, launched last year a campaign to raise awareness on parcel delivery scams. Using AI to generate fake Aramex branding alongside authentic company materials, the campaign video shows how to distinguish legitimate communications and know when people are being scammed.

Incidents of scams continue to surge across key markets, including in the UAE. Aramex customers regularly receive fraudulent SMS messages, emails, and social media communications from scammers impersonating the company, often requesting payment through unverified links or soliciting personal information (phishing).

ALSO READ

Dubai warns of rising fraud attempts using fake QR codes UAE alerts public to risks from phishing, SMS scams; 35% rise in fake messages UAE warns of scammers impersonating Ministry of Human Resources and Emiratisation

MENAFN31032026000049011007ID1110927502