Australia Post is urging its customers to remain vigilant as a new wave of parcel delivery scam messages and emails impersonating the company sweeps the country.
According to the post, the fraudulent messages claim a delivery failed due to an invalid postal code, luring recipients into clicking malicious links to hand over personal information.
This latest scam is part of the ‘Darcula’ phishing-as-a-service operation, which enables scammers to rent a cybercrime toolkit that mimics trusted brands to steal customer data. Darcula’s techniques bypass telecommunications and network filters to send scams over iMessage and Rich Communication Services (RCS), making them harder to block.
Research conducted by Pollfish in April 2025 of 1,000 Australians revealed 90% have received a scam text or call and nearly three-quarters report being targeted by scams mimicking parcel delivery services, highlighting the scale of the threat.
The research also showed that 85% were more concerned about scams today than they were 12 months ago.
Adam Cartwright, Australia Post chief information security officer, commented, “Scammers prey on busy lifestyles and the excitement and urgency in waiting for a package. The safest way to track your deliveries is directly through the official AusPost app. If you’re expecting a parcel, don’t click on suspicious links or respond to unexpected messages – always check the app first.”
For more tips on how to navigate parcel and delivery scams visit the Australia Post website.