We don’t normally posts about email scams, but MHOTC seems to be a victim of some serious spoofing. In the past month our inbox has been flooded with hundreds of replies to an email with the subject line “You’ve Got 1 Package Pending For Delivery”. The replies to us range from the curious to the confused to the downright rude and obscene. Bottom line: This is a totally phony SCAM!
We believe some bad actor, probably in another country, has managed to use our info@ email as the reply/contact for their email. They also lifted our logo and name our website. This is called “spoofing” — when someone pretends to be a legitimate business that they are not.
Basically, the email or text message says that your parcel is being held due to insufficient postage. Once you pay the “fee”, we will arrange for the package to be delivered.
Then, they ask you to click on “Schedule Your Delivery” to pay the fee or they will send the package back.
I’ve included a sample of what you may receive below. (Note: I scratched out the name and email of the person who received this email.)
If you get this email or anything that looks like it from anyone (not just MHOTC), do NOT respond. Do NOT click on anything. Do NOT try to unsubscribe. Mark it as Spam or Junk and DELETE it immediately.
I know it is tempting to tell the sender off or threaten to report them to police or ask them to stop or whatever, but you aren’t reaching the original sender. If you scroll through the actual email code, as we have done, you can see that a third party is sending our these emails under the guise of Mile High on the Cheap.
If you follow through and click on any links, the bad guys will get your personal information and credit card number and use them or sell them.
Please share this information and warning with your friends and family.
I realize that people receiving these emails are mostly outside Colorado, but many truly believe these are legitimate. I can tell because one person emailed me their personal information including name and mailing address!
There’s nothing MHOTC can do to stop these spammers, but please know it is NOT us. And our email list of subscribers has NOT been compromised.
Thank you for your understanding. We hope this public service announcement helps some of you.
Let’s stay safe and be smart consumers!
Laura & Bryan
Depending on how the sender is spoofing your domain, you may want to investigate configuring DMARC, as you do not currently have it set.
Thanks for the tip. We are working on that right now. LD