Overview
- Scammers are posing as buyers on Facebook Marketplace and sending links or QR codes to fake Australia Post courier websites that steal personal and financial information.
- Australia Post reports a resurgence of the global Darcula phishing operation, which rents toolkits and uses iMessage and RCS to bypass traditional spam filters.
- Research from Australia Post found more than 90% of Australians have received a scam text or call, with nearly three-quarters encountering delivery-service impersonation.
- Customers are advised to ignore any request for payment or personal details, check website addresses carefully, and manage parcels only through MyPost or the official AusPost app.
- The alert comes as Black Friday and Christmas spending ramps up, with 7NEWS citing about $6.8 billion expected in online sales and experts warning AI is making scams more convincing.