The holiday season is in full swing and with it, its share of impatiently awaited packages. A boon for cybercriminals who have deployed a formidable scam systemcapable of emptying bank accounts in just a few clicks. The scheme is based on the impersonation of big names in delivery such as Mondial Relay and Chronopost. A technique which is already causing thousands of victims across France.
Fraudulent sites that are difficult to distinguish from the originals
The trap usually starts with a seemingly banal text message or email. The message, in the colors of Mondial Relay or Chronopost, announces a delivery problem requiring rapid action. Cybercriminals have refined their approach by creating near-perfect replicas of official sites. The differences are almost imperceptible: only the URL, slightly modified, can alert the most vigilant.
Damien Bancal, cybersecurity expert from the Zataz blog, has identified dozens of these fraudulent sites. Domains like “ma-livraison-mondialrelay.fr” or “suite-mondialrelay.fr” are proliferating on the web. These malicious platforms copy official graphic charters exactly, making the deception particularly credible for consumers in a hurry to receive their packages.
A terribly effective scam mechanic
Scammers have developed several scenarios to maximize their chances of success. The most common is to claim additional charges for alleged customs tax or reshipping fees. Time pressure plays a crucial role: victims, fearing not receiving their packages before Christmas, let down their guard and comply without thinking.
Another popular scheme specifically targets mailboxes. Criminals send an SMS indicating that the package is too large to be delivered. They then offer a simple solution: reschedule delivery to a relay point for a few euros. This modest request actually masks an attempt to steal banking data.
Carriers fight back against the threat
Faced with this increase in scams, delivery companies are strengthening their communication. Mondial Relay is increasing its warnings and recalling its official procedures. The company insists: it will never ask for additional payment by SMS or email, nor will it request banking information for a simple delivery.
Cybersecurity services are observing an increasing sophistication of attacks. Scammers adapt their techniques in real time, taking advantage of periods of high commercial activity to maximize their impact. The accelerated digitalization of Christmas shopping provides particularly fertile ground for these scams.
The mobilization is also being organized by the authorities. The national police and the gendarmerie are increasing prevention campaigns, while cybercrime services are tracking down the networks responsible for these frauds. But the international nature of these scams makes their dismantling considerably more difficult.
Protect yourself effectively against parcel scams
Protection against these scams relies on simple but essential reflexes. First vital step: carefully check the site URL before any action. Carriers only use official addresses such as monderelay.fr or chronopost.fr, without adding terms like “tracking” or “my-delivery”.
Caution is particularly necessary when dealing with urgent messages requesting payment. Real carriers never ask for expense adjustments by SMS or email. In case of doubt about a delivery, connect directly to the carrier’s official website by typing its address into your browser. Avoid clicking on links received by message.
For effective tracking of your packages, keep the tracking numbers provided during your purchases carefully. They allow you to check the real status of your deliveries without going through dubious intermediaries. The holiday season requires increased vigilance, but these good reflexes will protect you all year round against scam attempts.
- Dozens of fake sites imitating carriers trap consumers
- Scammers use holiday rush to extort banking data
- Real delivery companies never ask for payment by SMS or email
