Listen to the episode
TLDR
CSIRT Italia has detected a new smishing campaign impersonating the BRT express courier. The victim receives an SMS notifying them of a failed delivery and inviting them to click a link to "book a new delivery." The clone site first asks...
How it works
CSIRT Italia has detected a new smishing campaign impersonating the BRT express courier. The victim receives an SMS notifying them of a failed delivery and inviting them to click a link to "book a new delivery." The clone site first asks...
Red flags
- Unexpected SMS from a courier with an external link for a "redelivery" never requested Request for payment of a small fee combined with the entry of complete card details and OTP code Clone site with a domain that only partially imitates BRT's official domain
What to do
- 1Red flags Unexpected SMS from a courier with an external link for a "redelivery" never requested Request for payment of a small fee combined with the entry of complete card details and OTP code Clone site with a domain that only partially imitates BRT's official domain What to do Never click links received via SMS: access the courier's official site by typing the address into the browser Verify the delivery directly through the official app or customer area If you have entered card details, contact your bank immediately to block the payment instrument and monitor transactions
Source
csirt-italia
Source reviewed by Mythos Forensic Team
https://www.acn.gov.it/portale/w/campagna-di-smishing-a-tema-corriere-brt-FAQ
Is Smishing fake BRT courier: scam SMS for redelivery and card data theft a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Unexpected SMS from a courier with an external link for a "redelivery" never requested Request for payment of a small fee combined with the entry of complete card details and OTP code Clone site with a domain that only partially imitates BRT's official domain
What should I do first?
Red flags Unexpected SMS from a courier with an external link for a "redelivery" never requested Request for payment of a small fee combined with the entry of complete card details and OTP code Clone site with a domain that only partially imitates BRT's official domain What to do Never click links received via SMS: access the courier's official site by typing the address into the browser Verify the delivery directly through the official app or customer area If you have entered card details, contact your bank immediately to block the payment instrument and monitor transactions
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.