HotNews No. 152: “Santa Claus” Scam: Your Gift Has Arrived – But First, Pay the Delivery Fee
Dear Clients,
The holiday season is a time for giving, but it is also when online scammers ramp up their activities. While many people eagerly await packages, gifts, and shipments from abroad, cybercriminals take advantage of this situation to steal personal information and money.
The most common form of these scams is fake SMS messages, which are presented as notifications from postal or courier services. These messages are carefully designed to create urgency and appear convincing, especially if the recipient is expecting a package. Typical examples include:
“Your package could not be delivered due to unpaid fees.”
“A gift has arrived – please pay the delivery fee.”
“The address is incomplete, please update your details to ensure delivery.”
Clicking on a link in the message redirects the user to a website that closely resembles an official postal or courier site. The site requests personal information, including credit card number, expiration date, and CVC code, supposedly to make a “small payment.” At this point, funds from the account can be stolen or misused.
These scams are particularly common during the holidays because they exploit everyday habits – online shopping, home delivery, and a high volume of packages in a short period. The message arrives precisely when a user expects a shipment, creating the impression that the notice is legitimate and requires immediate action.
Holiday-themed scams are especially dangerous because they use the promise of a “Santa Claus gift” as an emotional lure. Scammers often claim that only a minimal delivery fee is required, which seems harmless and does not raise suspicion. However, this small payment is not the end goal; it is a tactic to trick users into entering their full card details.
Once the information is entered, scammers may first perform a small transaction to verify that the card is active, then proceed with multiple or much larger charges. In some cases, the data can also be used for identity theft or other financial fraud. This is why these scams are particularly risky, even though they may initially appear minor.
To protect yourself, keep the following rules in mind:
- Do not click on links in suspicious SMS messages, even if you are expecting a package
- Never enter credit card information, especially the CVC code
- Check shipment status only via official postal or courier websites and customer service
- Pay attention to unusual sender numbers, spelling mistakes, or suspicious URLs
- If you have already entered your details, contact your bank immediately and block your card
The holidays are meant to bring joy, not unpleasant surprises on your bank statement. Stay alert – in the digital world, “Santa Claus” sometimes arrives with a fake link.
Kind regards,
Your DefendMe Team