Surge in Global Fake Shipment Tracking Scams Exploits E-Commerce Growth

Researchers from Group-IB report a significant increase in fake shipment tracking scams, with over 100 campaigns identified each month throughout 2025. The scams leverage the booming global e-commerce market, which sees 161 billion parcels annually. Attackers utilize phishing SMS messages claiming failed deliveries, directing victims to malicious sites designed to steal personal and financial information. Many of these scams are linked to the Darcula phishing-as-a-service platform, which offers tools for cybercriminals in over 100 countries. The scams often use URL masking techniques to appear legitimate, increasing the likelihood of victim engagement. Group-IB observed peaks of 218 and 208 unique campaigns in June and December 2025, respectively. Recommendations for individuals and businesses to mitigate these scams have been provided in the report. The threat landscape remains dynamic as attackers continue to adapt their methods.

Key Points: • Over 100 fake shipment tracking campaigns detected monthly in 2025. • Scams exploit the global e-commerce market with 161 billion parcels annually. • Many campaigns are linked to the Darcula phishing-as-a-service platform.