Phone return scam tricks victims into posting back devices sent to criminals
SCAM ALERTredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
A social engineering scam impersonating Canadian mobile provider Rogers, with reports in US anonymised Scam Guard records. Attackers open a contract in the victim's name using harvested data for credit checks, then send a genuine device and call to claim a shipping error, supplying a return label or QR code that routes the handset to an attacker-controlled address. Defenders should advise users to verify offers through official channels, never use caller-supplied return labels, report fraud, change any credentials disclosed, and retain call logs and shipping records.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Hang up and contact your mobile provider using contact details you have verified yourself before accepting any offer or return instructions.
- Do not use a return label or QR code supplied by a caller, and confirm any return destination directly with your provider.
- If you have already sent a phone, contact your provider immediately and ask for a fraud investigation of the affected orders.
- If you shared your account password or PIN, change it through the provider's official channels and check for unauthorised transactions.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Malwarebytes Labs