Warning Over 'Cleaning Superstore' WhatsApp Delivery Scam Targeting UK Users
A sophisticated new scam is circulating on WhatsApp, exploiting the trust associated with verified business accounts to steal personal and financial information from unsuspecting users in the UK. The fraudulent message mimics a common delivery fraud but with a dangerous twist: it appears to originate from a legitimate company, Cleaning Superstore, based in the United Arab Emirates.
How the Scam Operates
The deceptive WhatsApp text reads: "PRCL/GB Sorry we missed you today! Our delivery driver, John attempted to reach you but failed to do so. Visit [phishing link] to redeliver." Recipients who click the link are redirected to a fake delivery page, often impersonating services like Evri, where they are prompted to enter personal details such as name and address and pay a small redelivery fee.
Lisa Webb, a lawyer at the consumer group Which?, explains the heightened risk: "Because the messages appear to come from a verified legitimate business account, recipients are probably going to be more likely to trust the message than one that is not verified or just from a random number." Criminals are believed to have hacked a genuine Cleaning Superstore account to lend credibility to their scheme.
Consequences and Risks
Losing the nominal fee is just the beginning. The primary aim of this scam is to harvest bank and personal details for future fraud. Once payment information is supplied, criminals may deduct small amounts over time to avoid detection or attempt a large withdrawal during busy periods like Christmas. Even providing basic details like name and email can leave victims vulnerable to subsequent scams.
The legitimate Cleaning Superstore in the UAE has not responded to requests for comment, leaving users to navigate this threat independently.
What to Do If You Encounter the Scam
- Do not click on the link, share, or forward the message to anyone.
- If you accidentally click the link, do not share any personal details.
- If you have handed over account information, contact your bank immediately to report the incident and monitor for suspicious activity.
- Use WhatsApp's features to report the message and block the sender.
Webb advises: "Monitor [the account] for any suspicious activity. Banks can put a [mark] against your account so that suspicious activity is flagged. This scam is designed to harvest personal and financial information, so you are at greater risk of future fraud, even if no immediate money is lost, which is why it's absolutely essential that you report."
This incident underscores the evolving tactics of cybercriminals, who are increasingly exploiting verified platforms to deceive users. Stay vigilant and always verify unexpected delivery messages through official channels.
