How to spot a fake email from scammers impersonating InPost Parcel Machines?
3 November 2015
Remember: genuine Parcel Post notification emails NEVER contain any attachments! If you receive an email with an attachment, DO NOT OPEN the file (usually with a .doc extension) In addition, the wording "delivery note", which we do not use, often appears in the body of infected emails.
If you receive a fake news item, please send it to [email protected] using the 'forward' option.
[Updated 19.11.2014]: We are posting a comprehensive explanation of the case, prepared by our Security Department:
I hasten to inform you that we always make every effort to ensure that appropriate action is taken if a threat is detected.
This case is no different. As soon as the incident of customers receiving fake news was detected, we launched an information campaign via social media and on our websites to warn as many users as possible about the threat.
An analysis of the message headers clearly shows that this message was not sent from our email servers and that the sender is merely trying to impersonate our company in order to gain trust and encourage the opening of attachments (e.g. .doc files containing macros that download malware).
It is the responsibility of the administrator of the target mail server to prevent you from receiving emails that impersonate other domains. [i.e. only the administrators of the servers on which YOUR mailboxes are located can block such emails - note: Marketing Department :)].
The implementation of Sender Policy Framework (SPF) mechanisms, for example, by the technical staff responsible for maintaining the mail servers, will help in this respect. The use of SPF policies will filter out messages sent from email servers not authorised by the domain owners, thereby reducing unwanted and fraudulent messages.
At the same time, I would like to inform you that all e-mails which are forwarded in the correct form (as an attachment - so that it contains the full unaltered header of the original message) are being reviewed on an ongoing basis.
The verified evidence, together with the appropriate notice prepared, is forwarded to the relevant State authorities, who decide whether to take further action on the case.
We are very sorry for the inconvenience suffered by our customers and members of the public, for taking advantage of the trust our brand inspires to carry out actions which we do not believe are in accordance with the law. Unfortunately, apart from the actions described above, there is nothing more we can do.