Beware of the 'FedEx PACKAGE WAITING' Scam

There is one particularly stubborn scam that has been around for a few years now, almost unchanged in its basic concept and contents. This is the so-called "FedEx Package Waiting" scam.

More or less the exact same scam and setup were used in malicious SMS campaigns around two years ago. The same scam and bait has been reused time and time again since then, in various forms and using various platforms.

The latest iteration of the scam uses the domain "iketparcels dot com" to propagate the scam. The scam website uses the official FedEx logo to lend at least an air of legitimacy to the scam. The page also tells visitors that they have an expensive iPad Pro and a keyboard for it, "waiting at our warehouse". The page also includes a fake tracking number and a button labeled "Find My Package".

The scam combines elements of phishing scams, as it will ask for a number of personal details from the visitor if they click the button, and elements of ad spam campaigns. Together with the fake iPad message, the site causes the browser's "show notifications" prompt to appear. Allowing notifications only allows the page to send intrusive and potentially harmful ads to the target browser.

The scam is pretty lazily thrown together, with the fake FedEx page looking very barebones. It's an altogether different question why a random web page would know who you are and whether or not you specifically have an expensive gadget waiting for delivery.