UPS Tracking scam email

UPS Tracking Email Scam

This is only a quick blog  article to warn against opening any UPS tracking email that comes into your inbox.

The scam email that reached my inbox, supposedly came from Phillip Thurman and his email address was dampened @ seattleio.com. It had the subject line UPS Tracking Number QBR0YT2 and said, “ Hello! Unfortunately we were not able to deliver the package sent on the 1st of June in time because the recipient’s address is not correct.

Please print out the invoice copy attached and collect the package at our office.

Your United Parcel Service of America

Obvious Scam Email

Big warning signs on their UPS email:

  • UPS would always use your name if they were emailing you
  • UPS would always send from a UPS email address
  • UPS would always include their company details on the email
  • UPS would never send you a .dat file to open

The .dat file attached on my email was UPSNR_be23c5be.dat. I don’t know what it does. It appears to go into your system files, so it could be a trojan, or probably spyware - whatever it is - you don’t want it in your computer. Don’t open it - just highlight and hit shift+delete.

My UPS tracking email came from Phillip Thurman and his email address was dampened @ seattleio.com, but if you received one from a different email address, let us know and we’ll publish it here.

That’s it, you have been warned!

274 Responses to “UPS Tracking scam email”

Sean Says:

I received the same UPS tracking email containing the same attached file. It was from “Teddy Walton eyrieq43 @ startifa.com”.

alice boee Says:

I recieved the same UPS scam email with the exact same dat file attached.
The sender was: Lynette Miles displayingn78 @ sportchek.ca 8/7/09

shelley Says:

I rec’d the same thing today from Dolly Stahl caesars3 @ stevensbikes.de.

Daniel Cameron Says:

I also received the same UPS tracking scam email from: Colette Jordan utteranceii762 @ savantint.ru

Matthew Barrett Says:

Not sure why this is, but I’m now getting at least one of these each DAY!! Our spam filter doesn’t get them, but our virus protection. Report says as follows:

McAfee reports virus [Bredolab.gen] during MIME scan
Authentium reports virus [W32/Bredolab.D] during MIME scan
Panda reports virus [Trj/Sinowal.WMF] during MIME scan
McAfee reports virus [Bredolab.gen] during message scan
Authentium reports virus [W32/Bredolab.D] during message scan
Panda reports virus [Trj/Sinowal.WMF] during message scan
ThreatSeeker reports virus [Suspicious Attachments(UPSNR_1061846f.exe)] during part scan.

So bottom line is only open this if you are virtually suicidal

dawn Says:

We just received this.
Has anyone notified UPS??? I just did.

Coreolis Says:

I received another UPS tracking email this morning:
From:Bridget Blanco bilkedajc @ spiel-palast.de
Subject: UPS Tracking Number B81OLEQ
Zip File: Dof2984b8.zip

R MacGregor Says:

We got one of these today and spam did not detect it but virus protection did. detail UPS Tracking Number 8364047432
Marsha Atwood [friskingiot@shelkovo-info.ru]
As a liberal I hope they shoot the B*******!

Tim Woodcock Says:

I got one from ‘tracking@ups.com’. It contained a file called ‘warning.htm’ which was 873B. I have not opened it!

Di52 Says:

This got by AVG and my email provider. Of course the UPC contact email/website has so many irrelevant fields there is no way to email them:

Attachment: Your_UPS_feea.zip(51.3KB)

Hello!

Unfortunately we were not able to deliver your postal package sent on the 21st of June in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

——————————————————————————–

No virus found in this incoming message.
Checked by AVG - www.avg.com
Version: 8.5.421 / Virus Database: 270.14.5/2419 - Release Date: 10/07/09 05:18:00

Melchor Says:

I just got this UPS mail. One thing that’s different is that they are now using emails that have the @ups.com addresses.

Mine came from:

UPS Delivery Problem NR.31493
UPS Manager Tyrone Pike
———————–
Hello!

We failed to deliver the postal package you have sent on the 11th of July in time
because the recipient’s address is incorrect.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

————–

not scammed Says:

Hello!
The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.
You may pickup the parcel at our post office personaly!
Please attention!
The shipping label is attached to this e-mail. Please print this label to get this package at our post office.
Please do not reply to this e-mail, it is an unmonitored mailbox.
Thank you.
United Parcel Service of America.

As a post office worker I know damn well that parcels cannot be initially shipped without a receiving address.. people who fall for those are just morons.

H Says:

I got the same from

UPS Manager Jerald Powers [tracking@ups.com] which read

Hello!
The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.
You may pickup the parcel at our post office personaly!
Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.
Please do not reply to this e-mail, it is an unmonitored mailbox.
Thank you.
United Parcel Service of America.

It’s the “Please attention!” bit that gets me - surely someone at the scam bastards’ hideout has worked out by now that this is a dead giveaway? BM

Nicola D Says:

My e-mail said the following:

UPS Tracking Number 9971173.Wednesday, 13 January, 2010 6:35 PM
From: “UPS Manager Samuel Yoder” Add sender to ContactsTo: redbox91 @btopenworld.com Message contains attachments1 File (27KB)UPS_invoice_NR67974.zip

Hello!

The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly!
Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.
Please do not reply to this e-mail, it is an unmonitored mailbox.
Thank you.
United Parcel Service of America

D Says:

I just received a version of this today.

From: UPS Manager Dolores Brown
Subject: UPS Tracking Number 8441868

Hello!

The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly!

Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.

Please do not reply to this e-mail, it is an unmonitored mailbox.

Thank you.
United Parcel Service of America.

The return address if you right click and “view properties” says support @ups.com, but if you look at the details tab the return path is connoisseurs4 @learnyourscore.com. The attachment is named UPS_invoice_NR76234.zip

Naomi Says:

I got the same one as above, but from “UPS Manager Bettie Keller” with a fake ups.com return addy. Bogus tracking number, in the subject line (unmistakably bogus if you ever actually use UPS.)

duncan Says:

got one of these today from daxar @btinternet.com dont trust it - same as all the others

Hello!

The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly!

Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.
Please do not reply to this e-mail, it is an unmonitored mailbox.
Thank you.
United Parcel Service of America.

Stuart H Says:

I have just received this lot from so called “UPS”.
It’s not my email address but it still got through and my Kaspersky Internet security picked it up as a Trojan. as you can see it has a download of an invoice in WinZip.
Regards
Stuart H.

UPS Tracking Number 2503912.
Friday, 15 January, 2010 5:14
From:
“UPS Manager Cheryl Arrington”
Add sender to Contacts
To:
stuarts009 @yahoo.co.uk
Message contains attachments
1 File (27KB)

* UPS_invoice_NR34712.zipUPS_invoice_NR34712.zip

Hello!

The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly!

Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.

Please do not reply to this e-mail, it is an unmonitored mailbox.

Thank you.
United Parcel Service of America.

Sonya Says:

Just got one this morning that said:

UPS Tracking Number 0157705.
Thursday, January 14, 2010 7:30 PM
From: “UPS Manager Kristin Morton
To: sonya @illuminatedwisdom.com

Message contains attachments 1 File (27KB)UPS_invoice_NR67974.zip

Hello!

The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly!
Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.
Please do not reply to this e-mail, it is an unmonitored mailbox.

Thank you.
United Parcel Service of America.

Vince Says:

Just got one as well. “Please attention”. Awesome work, scammers!
Mine was from ‘ohsosweetgenna’. Can’t remember the rest as I deleted it before I saw this blog.

Diana Says:

UPS Manager Zelma Hancock [parcel @ups.com]

Hello!

The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly!

Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.

Please do not reply to this e-mail, it is an unmonitored mailbox.

Thank you.
United Parcel Service.

P.Jones Says:

I was actually expecting a delivery via UPS this week so when an EM dropped into my spam box from ‘Parcel at UPS.com’ I opened it - fortunatly my Norton security popped up with a dire warning. Of course there was a similar message as the others on here i.e. error on shipping address etc so ignored the attachment & deleated it. next day the same EM in my spam box - cheeky s-ds!!

JOHN KENNY Says:

RECIEVED THE FOLLOWUNG E-MAIL ON 15/1/10,

Hello!

The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly!

Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.

Please do not reply to this e-mail, it is an unmonitored mailbox.

Thank you.
United Parcel Service.

Andrea Picton Says:

I got this today, the attachment looks like a virus:

UPS Tracking Number 3707356.
From:
UPS Manager Corina Hogue
UPS_invoice _Nr78155.zip (43KB)

Dear customer!
The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.
You may pickup the parcel at our post office personaly!

Please attention!
The shipping label is attached to this e-mail. Please print this label to get this package at our post office.

Please do not reply to this e-mail, it is an unmonitored mailbox.

Thank you.
United Parcel Service.

Andrea Picton Says:

I should have added I did actually recieve a UPS delivery today.

Ray Says:

I just got one from DHL Manager Evangeline Contreres, and the email address it comes from is shipping @dhl.com

JENNIFER SMILES Says:

I HAVE RECEIVED TWO EMS FROM UPS TODAY, I THOUGHT I COULD DETECT A SCAM EASILY, I WAS WAITING FOR A PARCEL, I WAS TOLD BY YAHOO TO NOT OPEN THE MESSAGES UNTIL THEY WERE CLEANED UP, I JUST THOUGHT THAT THEY HAD NOT RECOGNISED THE SENDERS ADDRESS, SO LIKE AN IDIOT I HAVE OPENED THE ATTACHMENT, TOOK THE LETTERS TO THE PO ONLY TO FIND OUT THAT THEY ARE SCAMS, I HOPE THEY HAVEN’T MESSED WITH MY PC, PEOPLE LIKE THESE NEED TO GET A PROPER JOB

ak470125 Says:

I just received this today addressed by UPS Support Dolly Mcmillan

From: UPS Support Dolly Mcmillan
To: angela.wientjes @rogers.com
Sent: Tue, January 26, 2010 11:58:22 AM
Subject: UPS Delivery Problem NR 32453.

Hello!

“We were not able to deliver the postal package you have sent on the 26th of January in time because the addressee’s address is inexact. Please print out the invoice copy attached and collect the package at our department”

United Parcel Service of America.

A Crawford Says:

Just rec email today from
UPS Delivery Problem NR 26620.‏
From: UPS Support Christa Kruse (tracking @ups.com)
You may not know this sender.Mark as safe|Mark as junk
Sent: 26 January 2010 18:20:13
To: abulkassim1986 @hotmail.fr
1 attachment
UPS_invoi…zip (31.3 KB)

deleted straight away

kathleen richards Says:

i got one today from ”
upssupport austin posey”…..have they nothing else to do in their sad little lives

Sam M. Says:

Notice: “UPS” address, bcc address?, excess punctuation (periods). Here’s the garbage:
————————————
Subject: UPS Delivery Problem NR 97734.
From: UPS Support Wilfred Patel
To: cr4390 @netscape.net
Date: Tue, Jan 26, 2010 8:35 am
Attachment: UPS_invoice__NR1144.zip

Dear customer!

Unfortunately we were not able to deliver the package sent on the 19th of
December in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our
office.

United Parcel Service of America.
————————————

Herman Munster Says:

Funny thing is the To: address shown below is not my correct email address (not really even close, off by about 5 letters), but yet it still came to me.

The from email address looks like a UPS.COM address.

Subject: [SPAM]UPS Delivery Problem NR 75475.
Date: Wed, 27 Jan 2010 06:55:01 +0000
From: UPS Support Robin Bradley
Reply-To: creeps0 @DrasticMove.com
To: frasman @bellsouth.net

Hello!

Unfortunately we were not able to deliver your postal package which was sent on the 20th of December in time
because the addressee’s address is inexact.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

UPS Delivery Problem NR 75475

Bryan F Says:

Get one a day. Thankfully my service provider is blocking it. This is what I get every day.
From: “UPS Manager Floyd Harrell”
Subject: UPS Delivery Problem NR 16748.
Virus: PSTN-MalwareDetection
I guess I should be happy though, Mr. Dr. Professor Magula Uhmbimbway said I have a dead relative in London that left me 500 million dollars! AND I won the Microsoft Email Giveaway of 10 million dollars. I love the internet, it made me a millionare! LOL

Peter Says:

I also received a couple of these emails from “UPS Manager Antonia Christopher” and it goes like this:

Hello!
The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.
You may pickup the parcel at our post office personaly!
Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.

Please do not reply to this e-mail, it is an unmonitored mailbox.

Thank you.
United Parcel Service of America.

Kelly Says:

Mine was sent from service@ ups.com
Dear customer!
Unfortunately we were not able to deliver the postal package sent on the 18th of December in time
because the addressee’s address is wrong.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

that was the mail

Karen Says:

Got one today.

Attachments: 1 attachment
UPS_invoi…zip (30.6 KB)

Hello!

We failed to deliver the package which was sent on the 5th of December in time
because the recipient’s address is erroneous.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

Juan Says:

This is the mine:

Dear customer!

We failed to deliver the package you have sent on the 16th of January in time
because the recipients address is inexact.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

UPS_invoice_NR4567.zip

Nick Says:

I got this same email, but mine seemed to come from parcel@ ups.com. It had the zip attachment with the Bredolab.gen in it. McAfee made it go boom on my PC. [My mac doesn’t have these problems:D]

Amb Says:

Here are info:

Received: from 213.148.146.186 by mailwash27.pair.com; Mon, 1 Feb 2010 20:08:28 +0100
From: “UPS Manager Scot Ledford”
Return-Path:

Message was: Hello!
We were not able to deliver the postal package sent on the 4th of December in time because the addressee’s address is incorrect. Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Isobelle Says:

From: “UPS Manager Alyce Pierre” To: phildent@ primus.com.au Subject: UPS Delivery Problem NR 58344. Sent: Mon, 1 Feb 2010 12:40:35 -0700
United Parcel Service of America. UPS_document_Nr28451.zip (35.2 KB)

CAMPBELL MURRAY Says:

Dear customer!

Unfortunately we were not able to deliver your postal package which was sent on the 2nd of January in time
because the recipient’s address is erroneous.
Please print out the invoice copy attached and collect the package at our department.—– Original Message —–
From: “Service Manager Derek Brennan”
To:
Sent: Monday, February 01, 2010 5:47 PM
Subject: UPS Delivery Problem NR 84717.

United Parcel Service of America.

Melissa Says:

This is the one I got. The sender’s address made me think that it was almost legit until I checked the .zip file and it had a .exe (executable) file inside. I do not trust that in any way. so here’s the copy:

From: Manager Evangelina Bentley
Date: Monday, February 01, 2010 7:48 PM
To: (had a similar email to my own)
Subject: [Bulk] UPS Delivery Problem NR 47752.
Attach: UPS_document_Nr4772.zip(35.2 KB)

Dear customer!

We were not able to deliver postal package you have sent on the 27th of December in time
because the addressee’s address is incorrect.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

Christine Says:

The email I got was from “UPS Manager Alyssa Bartley [delivery@ups.com]” and it was sent to “dinorah@dcalkins.com” which is no where close to my email address. The message reads: Hello!

Unfortunately we failed to deliver your postal package which was sent on the 16th of December in time because the recipient?s address is wrong.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

claire Says:

Got this one today. Seem to be getting at least one a day!

Dear customer!

Unfortunately we failed to deliver your postal package sent on the 4th of January in time
because the addressee’s address is inexact.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

delivery@ups.com

MC Says:

Just got one:

Subject:UPS Delivery Problem NR 15072.
From:”Service Manager Carmine Goodwin”

UPS_invoice_Nr19373.zip

Boris Says:

I got one today - and I don’t even live in a country that has UPS!

When I tried to delete it normally, as in send it to ‘trash’, AVG detected a threat every time. I didn’t attempt to open it. If I tried to block the sender AVG would detect a threat. The only way I could get rid of it was the shift+delete shorcut to permanently delete it.

Never come across that before.

David Says:

This is a scam. Mine came as an executable file. The file isn’t even a document. Do people really fall for these? Unfortunately, yes they do.

SMitchell Says:

Also received this type email from “Manager Erwin Herrington” delivery@ ups.com

file was a zip file UPS_invoice_Nr27451.zip.

I deleted the email and didn’t open the file.

Cynthia Says:

Received Feb.4,2010 from Zelma Pate help@ dhl.com
Hello! The courier service was not able to deliver your parcel at your address.

Cause: Mistake in address

You may pickup the parcel at our post office personally.

The delivery advice is attached to this e-mail.
Print this label to get this package at our post office.

Please do not reply to this e-mail, it is an unmonitored mailbox!

Thank you,
DHL Global Forwarding Services.

When I viewed the source the return path was to:mousierm62@ marathonworldcup.com

Needless to say this is a scam!

Paul Says:

I’m getting several of these a day
First UPS then DHL and now supposedly from Google!

Victor Says:

Dear Sir/Madam,

For a long time, I’m being bombarded with this scam entitled UPS DELIVERY PROBLEM Nrs, varied…Unfortunately we failed to deliver your postal package which was sent on the 16th of December in time because the recipient?s address is wrong. Please print out the invoice copy attached and collect the package at our department. Can you tell me how to stop it, I have a Mac computer. Hope to hear from you kind regards, Victor There’s nothing you can do to stop them being sent to you, Victor. Either invest in a spam service like spamarrest, or simply delete them when they come in. BM

Erica Says:

Mine came from “parcel@ups.com” of course the return address was “flowerbedebn5@ExitMove.com”

Naturally I did not open it… even though being a Linux user and not a Windows user probably makes this person’s attempt pointless… but still, can’t be too careful.

John Says:

I am not only getting these from UPS but also from DHL. From: DHL Manager Hazel Snyder [shipping @dhl.com. I have not opened any because they sent me 2 on same day with 2 diferant managers names on them I now have 10 in my spam box all sent from diferant names but the same text.

Michael Peterson Says:

a message came through with the following information this morning.

from:
Support Johnny Sutton(package@ ups.com)

Heading:
UPS Delivery Problem NR 00959

Dear customer!

Unfortunately we were not able to deliver the postal package which was sent on the 2nd of January in time
because the recipient’s address is erroneous.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

It had a 31.0 kb zip file.

All incoming packages of which we are aware has either already arrived, or have been confirmed by e-mail thus far. I wouldn’t open any zip file that comes in this way without the company logo and other details such as my name in the e-mail.

Do not open!!!!!

Michelle Schuchart Says:

Got the below today:

UPS Delivery Problem NR 13484.
Wed, February 17, 2010 11:38:04 AM
From:
Service Manager Nikki Lowery
Add to Contacts
To: msunia@ pacbell.net

UPS_invoice _83134.zip (31KB)
Dear customer!

Unfortunately we failed to deliver your postal package which was sent on the 14th of January in time
because the addressee’s address is erroneous.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

artsy Says:

I got this email today:

From: Service Manager Sung Clark
Subject: UPS Delivery Problem NR 75149.
Attachment: UPS_invoice _83134.zip
Message: Dear customer!

Unfortunately we failed to deliver your postal package which was sent on the 16th of December in time
because the recipient’s address is inexact.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

Dave Brewer Says:

18 Feb:
Received one from Manager Sydney Arnold
service @ups.com
31 KB zip attachment.
In fact a PC timebomb!!!!!

Bill Becker Says:

Thu 2/18/2010 12:23 PM

Manager Laurie Deal [manager@ ups.com]
UPS Delivery Problem NR 16421.
UPS_invoice_933.zip(43KB)
Hello!

Unfortunately we were not able to deliver postal package you have sent on the 23rd of January in time because the recipient’s address is not correct. Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

Witte Says:

Hi,

I’m a driver with UPS Belgium. My sister got an spam email from UPS a little while ago, fortunaly i was there when she got it and warn her not to open it for one simple reason: UPS tracking numbers for electronic labels ALWAYS consist of 16 numbers or letters (letters only being possible in the first 8, the last 8 are always numbers). We have manual labels as well, but there is no email service attached to those. So if you want to verify the mail, just count the trackingnr digits, anything other then 16, spam mail.
Also, if you count 16 digits, you can go to ups.com, and use the track your package service (upper left corner after selecting location) to verify if the nr is correct.
One last note, our labels contain adresses and sometimes phone numbers, not email adressses, so even if ups wanted to warn you by email, we would have to contact the shipper for your email adress…
Long story short, unless you are a regular ups customer (as in shipper) be very carefull with mails from so called ups employers.

Witte Says:

Little note, it’s 18 letters and numbers in 1 tracking number, forgot to count in the first2, which are always the same anyway (1Z…..) Stupid mistake while trying to help you, sorry.

Mandy Says:

i got this one today

UPS Delivery Problem NR 25736.‏
From: UPS Manager Noreen Maddox (delivery@ups.com)
Sent: Wed 2/17/10 10:46 PM
To: thug@ hotmail.co.uk …..THIS ISNT MY EMAIL ADDRESS EITHER
1 attachment
UPS_invoi…zip (30.5 KB)
Hello!

Unfortunately we were not able to deliver postal package you have sent on the 5th of December in time
because the addressee’s address is erroneous.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Maureen Fearnside Says:

Hello

They are still at it - my scam box showed the following:

UPS Manager Cornelius Johnson Add to Contacts
To: mo.arifali@ yahoo.co.uk

UPS_invoice _933.zip (44KB)

——————————————————————————–

Hello!

Unfortunately we were not able to deliver the package sent on the 25th of December in time
because the recipient’s address is incorrect.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

My Kaspersky prevented me from opening the file.

Amanda Says:

UPS Delivery Problem NR 53220.‏
From: Postal Manager Denise Woody (delivery@ ups.com)
Sent: Wed 2/24/10 12:00 PM

Hello! Unfortunately we were not able to deliver postal package sent on the 18th of December in timebecause the recipient’s address is not correct.Please print out the invoice copy attached and collect the package at our department. United Parcel Service of America.

Attachment: UPS Label Zip

Caught in junk main. The zip file is what stopped me.

Eric Says:

Ok, we got a few of these today where I work… all like this:
———————————————————————–
Hello!

Unfortunately we failed to deliver the package which was sent on the 23rd of January in time because the addressee’s address is wrong.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.
———————————————————————–
all have a zip file attachment with the name “UPS_label_Nr(random#).zip” and have this for header information:

From: UPS Support Deena Moreno
X-Mailer: The Bat! (v3.71.01) Home
Reply-To: augustestd47@ seoagentur.org
X-Priority: 3 (Normal)
Message-ID:
To: saaga1950@ arvida.com
Subject: UPS Delivery Problem NR 95925.
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”———-350F307AF69BAD29″
X-Reverse-DNS: as5300-c5.cpc.entelchile.net
Return-Path: augustestd47@ seoagentur.org

it appears as though some joker from a home computer is sending these out their personal “mail server” software from “The Bat!” home edition. And the “reply” address is always different than the “from” address.
Also, ours apparently originated from Mexico according to the IP address 164.77.68.2

Trina Says:

Thank you for your reply “Witte”… as I was reading through these, one thought came to mind: WHY would UPS email someone? They go off of addresses.
I too, received one today:

UPS Delivery Problem NR 33816.
Wed, February 24, 2010 11:40:46 AMFrom: Postal Manager Robin Ash Add to Contacts
To: ____________.net

UPS_label_Nr3734.zip (65KB)

——————————————————————————–

Hello!

Unfortunately we were not able to deliver the package sent on the 3rd of December in time
because the recipient’s address is erroneous.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Pam Laurance Says:

Hello - I just received this and emailed UPS to ask them about it as I was suspicious. Now I see, from your web-site, that I was right to be suspicious. But it is so easy to be convinced that sending that (non-existant it seems) package could have happened in the lead-up to Christmas and been forgotten.

UPS Delivery Problem NR 79645.

Postal Support Dina York
to pam

Hello!
Unfortunately we failed to deliver postal package which was sent on the 17th of December in time
because the recipient’s address is wrong.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Alfonso Says:

I received one today from this address: Postal Support Ian Benavides <parcel@ ups.com with this message:
Hello!

We were not able to deliver your postal package sent on the 23rd of December in time
because the addressee’s address is erroneous.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

I am resident in Italy and this is the first time I got one. I suspected primarily because it was saying hallo!, with no name or reference. Do you know what the virus is supposed to do if opened? The majority of the malware attached are trojans, that when activated, give the spam thieves access to your machine and your personal information. BM

chris k Says:

Thanks, that was helpful!

Grace Says:

Just receive one at my company’s email account from parcel.delivery @ ups.com

It does look legitimate at first becuse it sent from an ups email, but I knew that it is a spam because I’m not responsible for logistic in the company.

Postal Support Glenn Mccoy Says:

Here’s the e-mail I received today. The zip file contains an executable. AVG, Avast, McAffee Anti-Virus, MalwareBytes, SpyBot Search and Destroy, and AdAware did not detect anything malicious in the executable, so you can not count on them to detect the malware.

Thank goodness for Google and this blog!

==========================================

UPS Delivery Problem NR 86757.

Hello!

Unfortunately we were not able to deliver the postal package you have sent on the 14th of December in time
because the recipient’s address is wrong.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Attachement: UPS_invoice_365.zip

Ernest Says:

From: Service Manager Michael Bartley [mailto:help@ ups.com]
Sent: 02 March 2010 23:20
To:
Subject: UPS Delivery Problem NR 08423.

Dear customer!

Unfortunately we were not able to deliver your postal package you have sent on the 27th of January in time because the addressee’s address is not correct.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

chris Says:

I received this one today 3/3/10

Service Manager Kelly Little [service@ ups.com]

Hello!

Unfortunately we failed to deliver the postal package you have sent on the 11th of December in time because the addressee’s address is not correct.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

bx166er Says:

Don’t get fooled by UPS failed delivery scam email. Attached was a zip file. I never downloaded it. Notice how the return-path and from are 2 different emails - big red flag!!

Here’s the details:

Subject: UPS Delivery Problem NR 89194
From: From UPS Manager Aisha Vigil
Return-Path:
X-Originating-IP: [64.202.189.90]
Attachment: UPS_Invoice_715.zip
Message:

Hello!

We failed to deliver the package you have sent on the 16th of December in time because the recipient’s address is wrong. Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

Todd Says:

This was recieved today. Norton 360 labled it as spam

UPS Delivery Problem NR 22262.

Hello!

We failed to deliver postal package you have sent on the 27th of December in time because the recipient’s address is wrong.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

J Roberts Says:

Rec’d this e-mail today supposedly via Facebook. It’s from Postal Mngr Dee Medvano via Facebook. It also states that “delivery could not be made due to erroneous address.” It was headered “Delivery Problem NR15369. Thanks for the warning!

Wendy Clark Says:

I received one today from this address:
UPS Support Eloise Oneil

Sent: Wed, March 3, 2010 4:14:05 AM
Subject: UPS Delivery Problem NR 27201.

Hello!

Unfortunately we failed to deliver the postal package sent on the 19th of December in time because the addressee’s address is wrong.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Attachement: UPS_invoice_715.zip (51KB)

Wendy Says:

I received one today from this address:
UPS Support Eloise Oneil

Sent: Wed, March 3, 2010 4:14:05 AM
Subject: UPS Delivery Problem NR 27201.

Hello!

Unfortunately we failed to deliver the postal package sent on the 19th of December in time because the addressee’s address is wrong.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Attachement: UPS_invoice_715.zip (51KB)

Talia Says:

Hi, received two of these! Do they really think people are silly enough to open them? That was probably a silly question in itself.

First one was on 03/03/2010 from; manager@ ups.com name: Postal Support - Bernado Cantu

Second one today 04/03/2010 from; parcel@ ups.com name: Postal Support - Gloria Bush

Both with the same text as everyone else has received, with an attachment ‘ UPS_invoice 472.zip’ and of course, I didnt open it!

Have UPS been made aware of these scams? Yes Talia, but there is nothing they can do about it. BM
Such buggers!!

Mary Says:

Thanks for letting us know about the scam - this is the version I got today (not to my real email address either). Came with a zip file.

From: “Manager Virgil Sweet”
To:
Sent: Thursday, March 04, 2010 2:12 AM
Subject: UPS Delivery Problem NR 50487.

“inexact address email”

Paul (Sweden) Says:

And I recieved this today March 4th, 2010:
“addressee’s address is wrong”.
from:
Support Trent Craig [delivery@ups.com]
“UPS Delivery Problem NR 154172″
Attachement: UPS_invoice_7734.zip
Sent: 2010-03-04 13:57
Recieved: 2010-03-04 13:59

Dijon Johns Says:

The email I received uses the address help@ups.com. Watch out for this. Since I couldn’t recall shipping a package in January, I was immediately suspicious. Also, if I did ship, I did not have need to provide my email address. I will be notifying our people of this scam.

From: “UPS Support Doug Stringer”
Subject: UPS Delivery Problem NR 73563.

recipient’s address is inexact.

Ernie Stephens Says:

II just received a similar message citing 13th of January as the date that I sent a misaddressed package. I was instructed to print out the attached info and bring it to their office to retrieve the package. Even though the email arrived at my email address it was addressed to wade @hotmail.fr. My antivirus program (Kaspersky) detected the virus and prevented me from opening up the message.

Katherine Says:

Here’s one I got today. The recipient’s address is totally incorrect, as usual.

From: UPS Support Cindy Walsh (delivery @ups.com)
Sent: Thu 3/04/10 3:36AM
To: sdbarbour @msn.com
UPS_invoi…zip

….failed to deliver postal package you have sent on the 23rd of January in time because the addressee’s address is erroneous…..
United Parcel Service of America.

It’s obvious that English is not their first language.

Sara Says:

I got one today from this EMAIL:
Manager Kerry Jenkins (package @ups.com)

….failed to deliver postal package you have sent on the 17th of January in time because the recipient’s address is incorrect………..

Lauren Says:

Hey there, I just got one of these today from “Postal Manager Marylou Stapleton” email help @ups.com

Considering I live and work in Australia, and have never used nor received any mail using UPS, I thought it best to double check, which is how I came to this site. Thanks for the heads up.

Pete Says:

Received 2 emails recently that went straight into my junk file that seemed very fishy:

UPS Delivery Problem NR 77876.‏
From: Manager Horacio Brooks (package @ups.com)
Sent: 04 March 2010 22:05:19
To: the_e_master @hotmail.co.uk
1 attachment
UPS_invoi…zip (35.7 KB)

UPS Delivery Problem NR 26969.‏
From: Support Vilma Chang (help @ups.com)
Sent: 03 March 2010 09:15:53
To: the_footwear_king @hotmail.co.uk
1 attachment
UPS_invoi…zip (50.7 KB)

Now I know they’re a scam they’ll be promptly deleted!! Also been getting a lot of emails from supposed banks, same message but from different banks asking to verify my account details - yeah not gonna fall for that one!

LB Says:

UPS Delivery Problem NR.710098413

Friday, 5 March, 2010 14:37:31
From:
Postal Manager Gerard Hunter

Add
To: …@btinternet.com

UPS_invoice_274.zip (48KB)
My BT email account picked it up as a virus straight away.

sibylle Says:

Same here. received email on my yahoo account:

Von:
“Postal Support Rosario Hickman”

1 Datei (48KB)

* UPS_invoice_528.zipUPS_invoice_528.zip

Virus detected
Datei: UPS_invoice_528.zip

P McIntyre Says:

Ditto. I received mine today, 6 March. Email address given was parcel@ ups.com. Same message: delivery problem. These people should seriously get a life - or at least a different hobby. I promptly contacted fraud@ ups.com and would suggest that anyone who hasn’t should do the same. I disagree about contacting UPS - what are they going to do about it that that they are not already doing? This has been going on for months. I do, however, respect your right to do as you wish. BM

Gordon Scrimgeour Says:

I got the following in my junk mail never seen it before and I did wonder what it was and found it is not new and been around a bit I see.
Don’t know what it does, but do now where I’m puttin’ it so it won’t do it here!

UPS Delivery Problem NR.62805‏
From: UPS Support Terrance Kirkland (parcel @ups.com)

D Chester Says:

I’m in Australia and I received one of these today from:

Service Manager Veronica Rosa

What a bunch of winkers these people are! I’d love to hear about some of them caught by the authorities and dealt with.

Julia Says:

From Manager Allyson Ellison Wed Mar 3 05:30:25 2010
X-Apparently-To: —–@ ymail.com via –.–.–.—; Tue, 02 Mar 2010 21:30:33 -0800
Return-Path:
X-YahooFilteredBulk: 80.48.21.122
X-YMailISG: kqpWHh0WLDvSaj5vi_oy5usHMuyN3Ha59WSsd9iJid3nepbbwq.Qw3712fxu2eOVe2C2×1kyM9t7naZ.OSMsG7xlC6goVMed9xNpT8DvIWIIyF8TQ_TpbelvNGkTArgz0QUt8irB9q.JawE1aIoKU8ZxzmznVhamPHRJwvWycPFxKdF8mdLIQjmdoA2.eAZ1fe8enXysOUmUrF9IaM861dHEQFteG.1hTLdgaYfb1GS0GWT2KhLnfsGvo3oIljH8NTxZArN3DzdUIJIpRZdQZIFjYTFHjOMd6Yc-
-Originating-IP: [80.48.21.122]
Authentication-Results: mta1120.mail.mud.yahoo.com from=; domainkeys=neutral (no sig); from=ups.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO JHISQFGQ) (80.48.21.122) by mta1120.mail.mud.yahoo.com with SMTP; Tue, 02 Mar 2010 21:30:33 -0800
Received: from 80.48.21.122 by mx0.yas-island.com; Wed, 3 Mar 2010 06:30:25 +0100
Date: Wed, 3 Mar 2010 06:30:25 +0100
From: “Manager Allyson Ellison” Add sender to Contacts
X-Mailer: The Bat! (v2.10.03) Personal
Reply-To: vainglorious@ yas-island.com
X-Priority: 3 (Normal)
Message-ID:
To: ooksaribu@ ymail.com
Subject: UPS Delivery Problem NR 67498.
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”———-C1674FF72AC5C1″
Content-Length: 70764
Dear customer!

We were not able to deliver the package which was sent on the 9th of January in time
because the recipient’s address is incorrect.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

added content incase anyone does an google search if this has a file open in an investigative office.

Pip Says:

I too have had 6 emails from different people with the same message. SO it has got to us down under in New Zealand too. The came from a Service Manager Sarah Cochran, a Postal Manager Joanne Hanson, a UPS manager Monique McPherson, UPS Support Bonnie Rosas, UPS Support Latasha Mccord all within 3 days of each other. What eggs!!

Peter Lonsdale Says:

Add UPS Manager Melinda Rogers to your list .

E-mail address package@ ups.com

Fortunately BT, my provider, deleted the virus before sending the rst on to me.

tried the above e-mail address and it does not exist.

Attachment : UPS_invoice_Nr284.zip

Jim Devine Says:

I have received a similar e mail re non delivery of UPS package.
This one supposidly same frpm a Postal Manager Jefferey Driscoll
and uses a delivery problem NR0802044 and refers to Document 876zip .
Thank you for notifying me that it is a scam as it is the second time I have received it. The first one I deleted anyway as I had nothing to do with UPS which is what I have done with this one.

Helen Says:

I get several of these a week, most recent is from Manager Rupert Louis [delivery @ups.com]
and with subject line: UPS Delivery Problem NR 35790.

Deneen Bowen Says:

I received this email today which included a zip file. I have not opened it. The email came from “package@ ups.com” and included two other emails.

TO: david@ parkersautoparts.com
REPLY TO: redrawnv4@ DesignMake.com

….. the recipient’s address is not correct……

Sarah-Louise Howells Says:

I have just received what appears to be a fake UPS mail message wit a .zip file attached. The senders email address is Support Sandy Sparks which actually looks very real, but the body of the mail is similar to that quoted on this site (shown below).
I live in the UK not sure where you are and how fast this is travelling around.

……….. the addressee’s address is incorrect. Please print out the invoice copy attached and collect the package at our department……………..

Dave K Says:

Got mine today

Return-Path:
From: “Manager Kara Dunbar”
To:
Subject: UPS Delivery Problem NR 46087.
Date: Mon, 8 Mar 2010 14:49:04 +1000
attachment filename=”UPS_invoice_Nr355.zip”

Obviously my address was in bcc

Being curious and naive i attempted to open the zip. Avast stopped me immediately.

(Incidentally, having searched, I found that the colin.hazley email address is given at the bottom of the “contact us” page of the Techtics.co.uk website.) Yes they use many real names, including Winston Churchill, Enid Blyton and Johan Wayne! BM

Ken Wangen Says:

From: UPS Support Marcos Buck
To: ME
Subject: UPS Delivery Problem NR 44315.
Date: 10-03-08 07:21:05 AM (Mon, 8 Mar 2010 15:21:05 +0200)
….. the addressee’s address is erroneous…… United Parcel Service of America.
Zip archive attachment (UPS_invoice_Nr414.zip)
………. Well, “Hello!” to U2; Bastards! Now get a real job and leave us alone….. Ha! there I told ‘em.

Valerie H Says:

I’m in Australia and received mine yesterday. Like other comments above, it got through my AVG protection and my service provider’s.

Mine came from Postal Support Eileen Fulton and was addressed to valeriehawkins@ ….com.au which is not my surname.

Dear customer!

Unfortunately we were not able to deliver the package sent on the 4th of January in time because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

Filename: UPS_document_345.zip
Size: 95187
Type: application/zip

The message source info is as follows:

Return-Path:
Received: from sausyp1.lnk.telstra.net (sausyp1.lnk.telstra.net [203.45.45.96]) by mail14.syd…..com.au (8.13.1/8.13.1) with ESMTP id o280ms78005125; Mon, 8 Mar 2010 11:49:00 +1100

Interestingly, when I just clicked on the message source for the second time in order to copy it here, AVG kicked in with a virus threat warning, so it’s good to know that it’s working but disappointing that it has taken 24 hours and a few views of the body of the email for it to alert me.

Thank you for documenting this problem and helping folks like me identify the threat.

Alex Says:

Got one from Manager Krista Goldsmith. Zip file attached.

Subject: UPS delivery Problem NR 96204

to field: adam@ econoappliance.com (?)

….. the recipient’s address is erroneous….. United Parcel Service of America

Mark O'Connor Says:

NOD32 AV4 does its job.. :) i have being recieving these @usa-ups.com and @ups.com for the past several months now. This morning i recieved 14 emails in the same minutes as below.
SO GOD DAM ANNOING…. have added subject rule now to outlook web access before polling for my catch all - hopefully this will work

09/03/2010 11:01:10 POP3 filter email message from: “Support Williams Kinney” to: with subject UPS Delivery Problem NR 90921. dated Mon, 1 Mar 2010 22:00:46 +0000 probably a variant of Win32/Statik potentially unwanted application contained infected files NT AUTHORITY\SYSTEM Threat was detected upon receiving email by the application: C:\vpop3\vpop3.exe.

Timmy sampson Says:

I have recieved two of these in the last three days, Both from diffirent names but both ending in parcel @ups.com. Considering the fact that I have not sent anything through ups in over 2 years, I would have opened the attachment if I had used ups. And also the address that it was sent to was not mine both times.

TANYA Says:

I GOT TWO SENT TO MY SPAM WITH THESE AS THE SENDERS:

UPS Support Janis Tomlinson (parcel.delivery@ ups.com) Manager

Mario Bledsoe (support@ ups.com)

Eric Says:

Mine is from Martha Hooker

KENT Says:

My email was from Belinda Pina - package @ups.com.
They wanted me to pay US$29 to open a zip file to get a copy
of an invoice so that I could go and pick up my parcel.
What’s the point when I live in Australia. I do not know anyone in USA
so no one would send me a parcel.

Edmonton Eddie Says:

Received this one today with the attachment: “UPS_invoice_234.zip” I didn’t even bother opening the email - just previewed and deleted.

Claire Says:

I’ve had two, the last one came from Noel Sherman the attachment is a .zip

Bartman Says:

I got mine today, March 16, 2010. It was from Postal Support Darwin Whitlock; standard text and this is the name of the attachment: UPS_invoice_234.zip

Brian Says:

I got one today:

From UPS Support Lucinda Callahan (parcel @ ups . com)
To: Adam_Weedon14@ hotmail.co.uk (this isn’t even mine!)

Luckily I have Defender, so if I opened it it would have been caught (hopefully), but Live wouldn’t even open the attachment, saying it detected an unknown virus. I wonder if it’s actually a new virus or just hidden?

jb Says:

I gt one today in the morning. From: “Manager Charlie Marcum” To: ludwig.r@ att.net (not my e-mail)

doc.62 Says:

i got one 3-15-10 at 11:11 pm from Postal Manager Laverne Conley(deliver @ups.com) and i did not know about this scam. i opened the e-mail but my vires blocker would not allow for the mail to come through, my system popped up a screen that said “do not open vires found in mail” I use AVAST ANTIVIRUS

Rita Sclavunos Says:

This is what I received from earthlink:

Virus Detected: CMU-11078-20100315

Message Details:
From: “Postal Manager Dick Spears”
Subject: UPS Delivery Problem NR.6629264
Date: Mon, 15 Mar 2010 23:24:14 -0800

Amen Says:

Service Manager Wesley Lovett (parcel.delivery@ ups.com)
Got one from this email. didnt open it. but i googled about it.
thanks for the heads up.

oap dave Says:

Mine was from ; Support Faustino Queen<support @ups.com.
No logo on email and I emailed back straightaway asking further details without opening attachment.
No reply after 36 hours sent reminder and then got response from
postmaster @ups.com telling me the recipients email address could not be found in the recipients email system!!!!
Also have had a similar email with attachment from Facebook Service <support@facebook.com which is very similar and purports to send an attachment with a new password to be opened. No logos of course !!!!!!!!!!!!
Good luck .

oap dave Says:

Mine was from ; Support Faustino Queen<support @ups.com.
No logo on email and I emailed back straightaway asking further details without opening attachment.
No reply after 36 hours sent reminder and then got response from
postmaster@ups.com telling me the recipients email address could not be found in the recipients email system!!!!
Also have had a similar email with attachment from Facebook Service <support@facebook.com which is very similar and purports to send an attachment with a new password to be opened. No logos of course !!!!!!!!!!!!
Good luck .

Jun Says:

Mine was from a: Postal Support Adolfo Mcdonough

…….because the recipient’s address is erroneous.
The only clue to this being a scam was that they got my email TOTALLY wrong. ^o)

Kate Says:

They are still going, and seem to be refining their work;

From: UPS Manager Jacques Rossi
Subject: UPS Delivery Problem NR 15242.

Date: Wednesday, 31 March, 2010, 2:01

Hello!

We failed to deliver the package which was sent on the 3rd of January in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

No logo’s tho and my name was not quite right in the ‘to’ field. Did not open the attachment.

First scan of document (before I open it) said it was clean….but I think that is wrong. Not going to try.

It was interesting as we did get a parcel late in January this year as a gift (from UPS) so you don’t know if someone has tried to send you something or not. And having an email coming from what looks like a UPS address is a concern. Hope they get stopped soon.

Paul B Says:

I got an email today with the same “not able to deliver” angle as most of you on here. Mine had a zip file attached which I didn’t open.

Support Debra Easley [parcel @ups.com]

lisa Says:

Got one today from manager@ ups.com with the subject “UPS Delivery Problem NR 42895″, I’ve had some contact with UPS lately and I got confused so I opened the email and read the same text as described here (like ak470125).

It was from Support Hazel Hedrick” and the attached file was named “UPS_invoice_7845.zip”, I klicked on it but at the second question/warning (which I get all the time) I felt something was wrong and stopped. Can it has done something to my computer anyway? I’m a bit worried…what should I do?

My spam-filter usually works quite well but apparently missed this (I have mail.com), so it’s great that this site exists to warn everyone.

misa Says:

Just got this one today. I’m wary of opening any attachment from any unknown sender so I always look at email address domain to weed out potential scammers but this one was from help@ups.com so it’s somewhat convincing. I don’t recall shipping a package via UPS in January but I do ship things for my job so it’s always possible. I googled the email address and found this page. Since the inside message was almost identical, I feel certain that this email is like the others. There’s a zip file attached (which I didn’t open). Here’s what the letter said:
From: Postal Manager Elmo Cruz [mailto:help@ ups.com]
Sent: Thursday, April 01, 2010 2:00 AM
Subject: UPS Delivery Problem NR.6267260
…… because the addressee’s address is erroneous.

United Parcel Service of America.

Holly Says:

Found this in my junkbox … curious so I opened it, it looked fishy so I thought I’d google it before I’d consider opening the zipped attachment
The “to” address isn’t my address either

From: UPS Support Augustine Moser (package@ ups.com)

To: awmelgar@ msn.com
…………… the recipient’s address is erroneous.

Sophie Says:

I got one today and unfortunately opened it, because I am expecting a package from UPS! Nothing has happened for several hours, so I am hoping that my virus protection got it…

here is the e-mail:

From: package@ ups.com
Subject: UPS Delivery Problem NR 86288.
Date: April 1, 2010 6:24:33 AM PDT
To: sierramistox@ aim.com

……….. the recipient’s address is not correct.

Summer Says:

Received on this morning:

UPS Delivery Problem NR 68280.

Hello!

Unfortunately we failed to deliver the package which was sent on the 1st of January in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

—-

Attachment: UPS_Invoice_4794.zip

It appears to be from: Support Dominique Beatty

But in the return path is: Return-path:

Damian Says:

Received several days ago. Support Gina Whitlock [help @ups.com] UPS Delivery Problem NR 37497. ……….. the recipient’s address is inexact.

kah Says:

Mine had a subject “UPS Deliver Problem NR 85576″ and was from Dora Huggins (parcel.delivery@ ups.com) The attached zip file was named: UPS_invoice_2794.zip

Mark Says:

Mine was subject line: UPS Delivery Problem NR.9827193‏ FROM: Service Manager Vicente Gorman (parcel@ ups.com). Kind of funny, the dude didn’t even bother to send individual e-mails, so it’s someone else’s e-mail address that shows up first, and I’m later on the mass e-mail. I can’t believe people actually make money as con artists when they’re that lazy. Sending out a million of these a day means they can be as lazy as they like. They only have to find a few people waiting for UPS packages that don’t read the emails properly and bam! - they have access to their bank accounts, credit cards, or any other info stored on their machines - and they are very successful in finding them! BM

Jacq Says:

Mine had: Subject: UPS Delivery Problem NR 00632.
and: From: “Manager Whitney Tompkins” . It was sent 3 April 2010, at 12.44 am

I run all my email through MailWasher Pro, before downloading ANY of it from my provider. Mailwasher allows me a look at the raw source of any email I get and is any easy way to spot the dodgy and the dubious.

Here is the raw source header of the one I got, in the hopes that it may help you to put the boot into these annoying morons. Notice that the “To” field doesn’t even match my actual email address!

Ciao, Jacq.

Return-Path:
Received: by cpms02.int.iprimus.net.au (8.0.025.1)
id 4B8404700130B796; Sat, 3 Apr 2010 01:15:04 +1100
Received: from mx04.syd.iprimus.net.au (210.50.76.228) by mx04spool.syd.iprimus.net.au (8.0.025.1)
id 4B7E2E67016E3FEE; Sat, 3 Apr 2010 01:15:04 +1100
Received: from host164-170-static.240-95-b.business.telecomitalia.it (HELO homegate) ([95.240.170.164])
by mx04.syd.iprimus.net.au with ESMTP; 03 Apr 2010 01:14:43 +1100
Received: from 95.240.170.164 by smtp.secureserver.net; Fri, 2 Apr 2010 16:14:38 +0100
Message-ID:
From: “Manager Whitney Tompkins”
To:
Subject: UPS Delivery Problem NR 00632.
Date: Fri, 2 Apr 2010 16:14:38 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=”—-=_NextPart_000_0006_01CAD26E.D41E1FE0″
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 4.72.3155.0
X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3155.0

This is a multi-part message in MIME format.

——=_NextPart_000_0006_01CAD26E.D41E1FE0
Content-Type: text/plain;
charset=”Windows-1252″
Content-Transfer-Encoding: 7bit

Dear customer!

Unfortunately we failed to deliver the postal package sent on the 22nd of January in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

——=_NextPart_000_0006_01CAD26E.D41E1FE0
Content-Type: application/zip;
name=”UPS_invoice_6794.zip”
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename=”UPS_invoice_6794.zip”

Heather Jack Says:

I have just received what, from checking your site, must be a scam too. Message title was “UPS Delivery Problem NR.1360375″ sent by Postal Support Jed Butcher [help@ ups.com] with a zipped .exe to open. I will now delete it!

Oliver John Martin Says:

Here is the scam I received today:

From: “Postal Manager Leona Negron”
inflateapbw @friendtrain.com
help @ups.com

…………… the addressee’s address is inexact.

Treborn Dun Says:

Headers in the scam email I received:

From: Service Manager Earnest Fields

Reply to header: highjackedlyj76 @autobahn.me

Xmailer header: The Bat! (v3.60.07) Professional

Subject: DHL Office. Get your parcel NR.2366594

Ann Lockwood Says:

Hi
Received today, in my mail but addressed to ‘annellison @tiscali.co.uk’. From: Postal Manager Rosalind Boggs [delivery @ups.com
‘Ups Delivery Problem NR8876739
Ups_invoice_98237.zip (47KB)
……. the addressee’s address is inexact.

Doug Says:

I just got one- from Manager Jerome Brantley service @ups.com

Alfonso Says:

I just received this message with a zip attachment which I deleted at once . I note that the mail indicated as recipient is not mine account, nor the one where I received the scam.

Ven 16 aprile 2010, 07:27:47
UPS Delivery Problem NR 62971.
Da:
UPS Support Bill Wynn
Aggiungi alla Rubrica
A: alfista900 @yahoo.it

UPS_document_69337.zip (50KB)
………. the addressee’s address is inexact.

Karen Says:

I got one from package @ups.com

darren Says:

I got this 1

UPS Manager Etta Helms (manager @ups.com)

Gary Says:

just recieved it too (in my spam folder ooh er!) . Adressed to someone with a slimilar name to mine @btinternet.com but the strange thing is that I have quite a different email address!

mail reads:
Dear customer!
We failed to deliver postal package sent on the 18th of January in time
because the recipient’s address is incorrect.
Please print out the invoice copy attached and collect the package at our department.
United Parcel Service of America.

file attached is:
UPS_invoice_25578.zip (44KB)

comes from:
Service Manager Rosanne Henry

Deborah Says:

Here’s what I received today:

From: “UPS Manager Adrian Jarvis”

contains attachments1 File (44KB)UPS_invoice_3279.zip

Dear customer!

Unfortunately we failed to deliver the package sent on the 9th of February in time because the recipient’s address is inexact.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

Joe Says:

I just received from “UPS Support Lynn Vance”
Subject : UPS Delivery Problem NR 22335.
Attachment : UPS_invoice_2557.zip

PJ Says:

UPS Delivery Problem NR.4213657Wednesday, April 21, 2010 5:28AM
From: “Service Manager Madeline Sexton” Add sender to ContactsTo: pjhickman @sbcglobal.net Message contains attachments1 File (44KB)UPS_invoice_5279.zipDear customer!

……….the recipient’s address is wrong.

kit dar Says:

UPS Delivery Problem NR 29506.Monday, April 19, 2010 10:18 PMFrom: “UPS Manager Eugenia Alford”

I have received from this person. Just posting for others to see who is also scamming. Thanks

Diann Says:

Rec’d same typs of message from
DHL Support Shelia Montes” <parcel @dhl-usa.com
DHL Tracking NR 79584719.

Cori Says:

Manager Kari Mcmillan [package @ups.com]
Subject: UPS Delivery Problem NR 51691.
Attachment: UPS_Document_1357.zip (48 KB)

Hello!
Unfortunately we failed to deliver your postal package sent on the 21st of March in time because the addressee’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.
DHL Express Services.

Picture Perfect Studios Says:

My spamware has blocked two of these in the past two days, but mine are coming from parcel @ups.com, so dont be fooled by the address that they are coming from now!

C. Price Says:

ON 4-23-10 Noon
Received a UPS email which is the same as the others
from Aaron Calloway
manage r @UPS.com
DHL International Services

kai Says:

mine sounds like it’s legitimate but my Antivirus said it was a Trojan. It came with the name Aimee Galloway <parcel.delivery @ups.com

Hanan Says:

Hi, Just received one as well:
parcel.delivery@ups.com
UPS Delivery Problem NR.9338518‏
From: Service Manager Daniel Correa

came through my Junk in hotmail

Dear customer! We were not able to deliver the postal package you have sent on the 2nd of February in timebecause the recipient’s address is incorrect.Please print out the invoice copy attached and collect the package at our department. United Parcel Service of America.

Theunis Says:

Postal Support Jimmie Walden (package @ups.com
I got the same thay only say hello

Gennadi Says:

I received this e-mail today. Noted that it does not have my correct e-mail address. Scanned the attchment before opening. Do not open the attachment. It is an .exe file full of worms and trijans. Here is the copy of the e-mail I received:

Full ViewUPS Delivery Problem NR.3866733
From: Manager Virgil Osborne Add to Contacts
To: getsaved @greatshepherdcc.com
Attachment: UPS_postal_document_997.zip (27KB)
——————————————————————————–
Hello!
Unfortunately we failed to deliver your postal package which was sent on the 4th of February in time
because the recipient’s address is erroneous.
Please print out the invoice copy attached and collect the package at our office.
United Parcel Service of America.

michelle rodriguez Says:

i received one from
from: “Manager Rhea Mason” Añadir remitente a
to: masaenzmas @yahoo.com.mx

A. Boyd Says:

I kept on getting these and ignored them. Finaly I decided it may be material from a site my wife has visited. I downloaded the attatchment. My security ( Macafee) reported no virus risk. The result was a rogue security on my computer a Trojan, called Vista home security or something like that aand their logo(a windows shield) appeared on the bottom right on my desktop. I tried to go into my uninstall it didn’t appear on the list. I tred to change the start up programmes on my control panel, every time I did this I was blocked by it.I shut down my computer after scanning with Macafee.When I started up again I got a blue screen on my desktop. I started my computer again in safe mode and when I got on my desktop Macafee had identified the problem after rescanning activating system restore to the previous day’s date the problem was gone.
The point of thje rogue security was that it was telling you that your computer is infected and had to pay them to fix it.
I can’t believe I got caught with this because I always warn people against such things.

I don’t know if it is my failing eyesight but I find the pale coloured text difficult to read. Thank you Alex Boyd

Paul Sutton Says:

Heres mine below. no1rabbit is not even my email address even though its fairly similar so why is msn letting it get into my junk folder. also my dad had one similar a few months ago. they are using ups in the email address now but it was the no1rabbit for my email that made it look more suspicious.

UPS Delivery Problem NR 99828.‏
From: UPS Manager Leonard Castle (parce l@ups.com)
You may not know this sender.Mark as safe|Mark as junk
Sent: 29 April 2010 18:30:06
To: no1rabbit @msn.com
1 attachment
UPS_invoi…zip (56.0 KB)

Vic Says:

I received one of these mails 3 days ago here’s the name and address they sent it from:

- Manager Avery Savage -

J. Quest Says:

UPS Delivery Problem NR.5682686‏
From: UPS Manager Shannon Lange (service @ups.com)
Sent: Tue 4/27/10 5:57 AM
To: jason1175@msn.com
Attachments: 1 attachment
UPS_posta…zip (26.3 KB)
…………the addressee’s address is wrong.
Note that the ‘To:jason1175@msn.com” is NOT my email address yet this email somehow showed up in my box

BB Says:

got this today:

UPS Delivery Problem NR.6131301

Postal Manager Tim Ogden [package @ups.com]

…. the addressee’s address is inexact.

Attachment: UPS_invoice_2978.zip(28k)

Unzipped: UPS_invoice_2978.exe

I didnt run the exe, but invoices dont come as an executable file!

Jim Ferguson Says:

Hi, I received one of these email today from the supposidly UPS stating the following:

This was sent from someone calling themselves Coleen Moon

Hello!

Unfortunately we failed to deliver the postal package sent on the 16th of February in time because the recipient’s address is wrong.
Please print out the invoice copy attached and collect the package at our department.

DHL Customer Services.

The attachment was UPS_invoice_4978.exe

DO NOT OPEN IT…I nearly did until I view the security warning on my screen.

Bruce Says:

I also had the same thing happen, in fact I’ve had a couple of these lately and both times I deleted them, this time I decided to google it and found you posting, I had a different name as follows: Support Julianne Hayden [delivery @ups.com]

D Says:

UPS Delivery Problem NR.3250180‏
From: Manager Kristen Odonnell (delivery @ups.com)
Sent: 05 May 2010 11:43:52
To: emilymarshall1 @hotmail.co.uk
1 attachment
UPS_invoi…zip (27.6 KB)

If you’re having problems downloading attachments, please sign in again and select “Remember me on this computer”.
Sign in again

Dear customer! Unfortunately we failed to deliver postal package which was sent on the 17th of February in timebecause the recipient’s address is inexact.Please print out the invoice copy attached and collect the package at our department. United Parcel Service of America.

What a load of rubbish!!!

vicki jones Says:

I received this a few weeks ago and I opend it, what should I do?? cant find a file or nothing on my laptop? where would it be?? received another off them today too, thank you. Check out my previous replies to the comments above to others that have asked the same , or similar, question. BM

viraat harsh Says:

mine came from
Manager Joshua Rosario

Chris Says:

I received one from:
Postal Manager Hattie Wade
help @ups.com

Did a quick google search and found this page, obviously a scam.

Steven D. Says:

Call me paranoid but these days, I Google every unknown address and sure enough what comes up…..SCAM. I got one from this LOSER. Janie Muller (parcel.delivery @ups.com)

Jerry M. Says:

Here is another one - MY email is not jerry_ryan:
UPS Delivery Problem NR 48971.‏
From: UPS Support Maureen Campos (support @ups.com)
Sent: Tue 5/04/10 4:13 PM
To: jerry_ryan @q.com
1 attachment
UPS_invoi…zip (27.6 KB)
—————————————————————

I did as UPS site says:

If you receive a fraudulent or suspicious e-mail that claims to be from UPS, do not respond or open any attachments or links associated with the e-mail. Please forward the e-mail to fraud@ups.com before deleting. Because our systems work to protect the UPS network by blocking content that may pose a security risk, we recommend you either copy and paste the header and message into a new e-mail or scan the e-mail and send it as a PDF attachment to ensure it is received by fraud@ups.com.

MIchelle Says:

I got one too:

UPS Delivery Problem NR.0946784‏
From: Support Ken Valle (parcel.delivery @ups.com)
You may not know this sender.Mark as safe|Mark as junk
Sent: Wed 5/05/10 11:46 AM
To: fireyangel43 @msn.com
1 attachment
UPS_invoi…zip (27.6 KB)

Hello! We were not able to deliver the package you have sent on the 28th of January in timebecause the addressee’s address is inexact.Please print out the invoice copy attached and collect the package at our department. United Parcel Service of America.

simon Says:

From: Postal Manager Brooke Stafford
Subject: UPS Delivery Problem NR 72334.
Part(s): 2 UPS_invoice_Nr1277.zip [application/zip] 67 KB Download Download All Attachments (in .zip file) Download All Attachments (in .zip file)

If it is not displayed correctly, click here to open it in a new window.
Hello!
We were not able to deliver the package you have sent on the 23rd of February in time
because the recipient’s address is wrong.
Please print out the invoice copy attached and collect the package at our office.

DHL Customer Services.

joan Says:

UPS Delivery Problem NR 70912.
“Support Mariano Myers”

To:marouf_dwaikat @yahoo.fr

* UPS_invoice_Nr4277.zipUPS_invoice_Nr4277.zip

………. addressee’s address is erroneous….

Pepperd del Prado Says:

This is the spam I always get every day from this scammer.
“UPS Support Angel Phipps [service @ups.com]
UPS Delivery Problem NR 98509.
Hello!
We failed to deliver postal package which was sent on the 26th of February in time because the addressee’s address is incorrect.
Please print out the invoice copy attached and collect the package at our department.

DHL Services.”
The sender was so careless mentioning DHL Services, when the email address was UPS - doh! Where to hang these scammers!

The Welly Says:

We recieved the addressee’s address is erroneous. UPS International from Postal Support Sarah Mcneal [delivery @ups.com].

Marva Lashjly Says:

Today I received one from UPS as well telling me the same thing. It came from Silver Enny badsanne @ups.com and the # is NR2810194 It is a good thing that I decided to check before opening it because I was ordering lots of things. It is always good to check the date that they said you ordered because I did not order anything on that date.
Hello!
We were not able to deliver the postal you have sent on the 3rd of April in time because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.
UPS International

jade Says:

I need some help!

I got this same email, thought it was spam, and opened the file by mistake 2 weeks later!
I have a mac and NO virsu protection, ad now I am scared!

PLease, what should i do???

These are the files that I downloaded, but have since deleted them…. is it too late? I am sorry if I seem like an idiot, I am only new to mac and was assured I didn’t need protection! Now I’ve done some reasearch adn realise what a fool I am!!

Any suggestions for programs?!?! And what I should do now??

Kindest Regards,
Jade

UPS_invoice_4978-1.exe
UPS_invoice_4978.exe
UPS_invoice_4978.zip
UPS_invoice_4978.zip 12-42-54-892.zip

Sorry, but I have never owned an expensive drawing machine a mac, but Mac’s van get viruses the same as real computers PCs. Excuse my flippancy Jade, I have no experience of virus software for Macs, but you could try http://www.clamxav.com/ or http://www.iantivirus.com/. If anyone else reading this owns a Mac, and they can help Jade with her issue, please leave a comment. BM

David Ricks Says:

Just received the same e-mail from “”UPS Support, Woodrow Gurtner” “. The attached file was invoice0753098.zip (77k bytes) .

JON Says:

Another name for the list :

From: “UPS Manager, Michel Siedner”

From a UPS address too !!!!!!!!!!!!!!!!!!!!!!!!

Rach Says:

Email received 27 April 2010, not flagged as spam
I am in Australia
The “To” email address is not mine

From: Postal Manager Nathan Daugherty
To: short_scary14 @yahoo.com
Att: 353057926.txt (1KB)

Hello!

We failed to deliver the package which was sent on the 6th of March in time because the recipient’s address is wrong.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Paul Says:

Just got what appears to be the same email.

From: UPS Support, Manuel Nails <jjlvr @ups.com
Subject: [Bulk] Delivery Problem NR2490663.
Date: June 21, 2010 6:14:18 PM PDT

Attachment: invoice_N9880006.zip

Dear customer!

We failed to deliver the package which was sent on the 28th of April in time because the recipient’s address is wrong.
Please print out the invoice copy attached and collect the package at our office.

UPS International.

I deleted it and marked it as spam.

Jo Malone Says:

Got mine today from

UPS Manager, Angus Stoelting [sgmyt @ups.com]

It contained a similar message to the others, deleted it, but annoyed that it didn’t go to junk email.

STUART Says:

My emails always come with a name @ ups.com

Annie Says:

Now they are using jpegs.
I received an email from: “UPS Support, Luke Grist”
The subject:UPS INVOICE NR2553704
The attachment is 4393679.jpeg

tomy Says:

hi ive recived quite afew from them but never opened them the lst nsme was wyndham Pavy @ups.com my comp identified it as a trojan,,so Dont Print The Reciept,,good luck!

lei Says:

i received 2 of these…
but the thing is i had actually sent 2 packages so i called ups to tell them they sent me a virus so i have no way of opening it ..the guy was like sorry but we dont have packages here..i was freaking out the whole time..then i just thought hmmm let me google this and this came up..such a relief to know it was a scam and my laptop detected it..oooh and both the recipients emails on these are not my email!!!!

UPS Invoice #9173312887Lundi 21 juin 2010 15h42
from: “United Postal Service” Ajouter to: laetycia02 @yahoo.frMail avec pièce jointe1 fichier (29 ko)UPS_Invoice_12.06.2010.zip

Dear Sirs,

We were not able to deliver postal package you sent on the 19nd June in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.

Personal manager: Frieda Lehman,

UPS Tracking #9531164276Jeudi 27 mai 2010 19h46
from: “Your UPS” Ajouter
to: laf3a @yahoo.fr Mail avec pièce jointe1 fichier (30 ko)UPS_LABEL_Nr.SDO_9932-24522111.zip
Dear Customers,

We were not able to deliver postal package you sent on the 12nd May in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.

Your personal manager: Penelope Rosario,
Customer Service: 1-800-CALL-UPS
Fax: 888-197-1046
Your UPS

Ann Says:

All right, I am an idiot.

Although I am usually great at spotting scams, I feel for this one. Even tried to download the file (several times…)

As a mac user, what should I do now?

– reformed idot As a Mac User, you should throw it in the bin and buy a PC :) Seriously though, stick a virus and trojan checking program on your machine and take out any offending malware. BM Check this out

Gerri Says:

Received 6/21/10:

Subject: Deliver Problem NR6238334.
Message (Attachment invoice_N1832745.zip - containing an .exe)

Body:
UPS Official looking “Letterhead”

Dear customer!
We failed to deliver postal sent on the 28t of April in time because the recipient’s address is wrong. Please print out the invoice copy attached and collect the package at our department.
UPS International.

Like I said, the attached “Invoice” is an exe!

(this too was made to look as if it was from a ups.com email address - anyone can mask an email address to look like it’s from anywhere)

~~~~~~~~It goes without saying, DELETE, delete, delete!!!~~~~~~~~

Take care all!

Frank Says:

Hi UPS

I sent 32 cartons to USA,but my customer only receive 31cartons? where is my carton? tracking H872 **** *** for your reference!!!

Hope to hear from you soon!

Best Regards
Frank, do you think that I am UPS? Read the article! BM

Frank Says:

PLs send your reply to my email address directly. it is quite urgent.you are broking my business with our customer!!! You are just not getting this are you Frank. I say again, read the article - WE ARE NOT UPS. BM

Lorna Says:

I received an email from UPS asking me to collect an undelivered parcel at there office. It also contained an attachment. The senders name is Selima Kahoohaphata <jacksharpe @UPS.com. I also received a similar email from fedex today.

dick merrill Says:

Here s what I got.

UPS Europe N.V./S.A.
Avenue Ariane 5
1200 Brussels

This is to notify you that your parcel has been intercepted and is temporarily being held in transit in Spain .We have suspended the delivery process for the following reasons:
1. Our scanning system has detected that your parcel contains valuable items .
2. In line with new laws,Valuable items are to be fully insured and are subject to postal inspection by the UPS.
Our postal inspection department has verified the value of the package.
Concluding the verification on the package our office has ascertained that the package was not duly insured.

We have made efforts to contact the sender ,however we are unable to find a return-to-address,hence we are contacting you.Your name and email address were on the

parcel for contact details.

The contents have been ascertained as a non-risk item,however under new laws any parcel is liable to full insurance coverage

payment.This is in the unlikely event of theft or loss of the parcel.The sender did pay the appropriate courier fee but did not state the true value of the contents of

the parcel .We are therefore requesting you pay full insurance for the coverage of the parcel.

In order for us to release your package, you are obligated to pay the due insurance on the contents of the parcel You should therefore contact our Spanish Liaison Officer in Madrid Spain ,where your parcel is currently being held While we wait to receive from you the insurance File Number to enable us forward your package to your address. Below is the contact information of our Spanish Liaison Officer.

Name: Mr. Tony White
Email address: whiteanthony@ terra.com

Phone: + 34 672-950-466

angie Says:

i have received 20 emails in the past 12 hours about this from a Darren Gromer! 20,

Karen Farrell Says:

I HAve had one of these DO NOT OPEN THIS IS A TROJAN ….THANKS TO MY BRILLIANT VIRUS PROTECTOR WHICH PICKED IT UP /…..THIS STATED THAT I DID NOT HAVE CORRECT ADDRESS…..FROM ….
cliff@ clifford20121948.wanadoo.co.uk i have been waiting for parcel so be VERY CAREFUL ……..THIS WAS SENT TWICE BUT I HAVE PUT ON BLOCK NOW

Karen Farrell Says:

haD THIS ONE FROM From:
“UPS Service Delivery” Save Addresses
To:
cliff@ clifford20121948.wanadoo.co.uk
Date:
Sep 29 2010, 06:42 PM
Subject:
UPS Services. Get your parcel NR64337 Show full header

Return-Path:

Received: from mwinf3626.me.freeserve.com (mwinf3626 [10.232.31.126])
by mwinb3101 with LMTPA;
Wed, 29 Sep 2010 19:42:18 +0200

X-Sieve: CMU Sieve 2.3

X-Bcc…..

Envelope-to:…..

Received: from smtp6.freeserve.com (localhost [127.0.0.1])
by mwinf3626.me.freeserve.com (SMTP Server) with ESMTP id 169A41C000E3;
Wed, 29 Sep 2010 19:42:18 +0200 (CEST)

Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3626.me.freeserve.com (SMTP Server) with ESMTP id 0BBAD1C00149;
Wed, 29 Sep 2010 19:42:18 +0200 (CEST)

Received: from 173.193.223.134-static.reverse.softlayer.com (unknown [200.206.191.78])
by mwinf3626.me.freeserve.com (SMTP Server) with ESMTP id 5348C1C000E3;
Wed, 29 Sep 2010 19:42:12 +0200 (CEST)

X-ME-UUID: 20100929174212341.5348C1C000E3@ mwinf3626.me.freeserve.com

Received: from 173.193.223.134 by mail.rocroi.com; Wed, 29 Sep 2010 14:42:10 -0300

Message-ID:

From: “UPS Service Delivery”

To:

Subject: UPS Services. Get your parcel NR64337

Date: Wed, 29 Sep 2010 14:42:10 -0300

MIME-Version: 1.0

Content-Type: multipart/related;
type=”multipart/alternative”;
boundary=”—-=_NextPart_000_0006_01CB5FFD.A4C04620″

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.2180

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

X-me-spamlevel: not spam user

X-me-spamrating: 71.821312

X-me-spamcause: OK, (350)(1000)gggruggvucftvghtrhhoucdtuddrfedtfedrvddugddvleduiecuteggodetufdouefnucfrrhhofhhilhgvmecuohhrrghnghgvrdhukhenuceurghilhhouhhtmecufedttdenuciiihhpucgrthhtrggthhgvugculddqhedtmdenogfqvdeltddqudegucdlgedttddm

THIS ONE LOOKS LIKE REAL ONE WITH CORRECT COLOURS ETC…….AND ALL TRACKING …..BUT NUMBERS ARE NOT LONG ENOUGH ………..
BE VERY CAREFUL THIS IS A TROJAN ESPECIALLY BEFORE XMAS WITH ON LINE BUYING …………..

kizzle Says:

just got one from usps@ usps.com

contained a zip file which I scanned and got the OK. Ran the zip file, and it produced a .exe file. The email said it contained a .doc label, blah blah blah.

I scanned the .exe file and came up clean. I double clicked on the file (stupid, I know…) and Norton prevented it from opening. I googled the topic and here I am.

Funny thing is that the email looks like the text was photocopied or scanned, then photoshopped into a message format. There was even a faint yellow text under the body of the email talking about a totally unrelated topic.

Just like everyone else here, the email stated on a particular date I sent a letter that could not be sent b/c of en erroneous (Wedding Crashers anyone?) address. Funny thing is I actually sent a letter on that exact date.

Sounds like an inside job, and USPS needs to be notified of this breach in security. Faint yellow text on an unrelated subject and you still double clicked on it? What were you drinking? ;) BM

Talbot Says:

Got the same scam email from monarchsrngw4 @riga-lv.com

I did NOT open the attached zip file

Serenity Says:

I got an email from Client@ ups.com

The message was:
Hello

The parcel was sent to your home address. And it will arrive within 3 business days.
More information and the tracking number are attached in document below.

Thank you for your attention.
UPS Customer Services.

And underneath is in a off white (I noticed it on my blackberry but not in my actual PC inbox)
It read:
I went away by myself to the end of the island, and then I did bathe.It is impossible to conceive anything more desolate than the appearance of the place. The land shelves very gradually away to the water, and the whole margin, to the breadth of some twenty or thirty feet, is strewn with the debris of rushes, bits of timber, and old white withered reeds. Whence these bits of timber have come it seems difficult to say. The appearance is as though the water had receded and left them there. I have heard it said that there is no vegetation near the Dead Sea; but such is not the case, for these rushes do grow on the bank. I found it difficult enough to get into the water, for the ground shelves down very slowly, and is rough with stones and large pieces of half-rotten wood; moreover, when I was in nearly up to my hips the water knocked me down; indeed, it did so when I had gone as far as my knees, but I recovered myself; and by perseverance did proceed s omewhat farther.

The attachment was:
Tracking_information_NR8507.zip

AVG said it was a “fakealert” virus. So yeah… Don’t open.

Joan Juner Says:

Hello

Your parcel has arrived at the post office on October 17.
Our Driver was unable to deliver the parcel to your address.
To receive a parcel you must go to the nearest UPS office and show your mailing label.
You need to print mailing label, and show it in UPS office to receive the parcel.

Thank you for your attention.
UPS Global Mail.

Wed, October 20, 2010 3:29:40 PMUPS Invoice copy N57053453
From: UPS Global Services Add to Contacts
To:

UPS_Label_NR0527.zip (25KB)

Dugald Gonsal Says:

Hi. I am from the UK and received such an email but did not open it. Here are the details.

Subj: You need to get a parcel number 73879
Date: 20/10/2010 22:10:04 GMT Daylight Time
From: message@ ups.com
To: blasnog113@ aol.com

Dear client
Your parcel has arrived at the post office on October 13.
Our Driver was unable to deliver the parcel to your address.
To receive a parcel you must go to the nearest UPS office and show your mailing label.
You need to print mailing label, and show it in UPS office to receive the parcel.
Thank you for your attention.
UPS Logistics.

Attachment Name: UPS_Label_NR5776.zip(25.1Kb) - This is an .exe file!

R Says:

I got this on 10/20/10 from United States Postal [usps@usps.com] What made me suspicious immediately is that it has USPS in the address but the body of the mail says UPS. It contained a zip file which I did not open with the name UPS_Label_NR3082.zip.:

Dear customer.

Your parcel has arrived at the post office on October 10.
Our Driver was unable to deliver the parcel to your address.
To receive a parcel you must go to the nearest UPS office and show your mailing label.
You need to print mailing label, and show it in UPS office to receive the parcel.

Thank you for your attention.
UPS Customer Services.

Way down in the messages was this text:
But people are very apt to take the view which M.de Cassagnac so frankly avowed when addressing the Republican party in the Chamber: We claim unbounded liberty for ourselves–because you promise it in your programme; but we refuse it to you–because it is contrary to our principles. About the middle of November there was copied into the Temps an anonymous letter which had appeared in Truth, professing to express the hostile feelings entertained by English naval officers against the officers of the French fleet, which had recently visited Malta. This roused Mr. Hamertons indignation; the more so as he never for one moment believed the discourteous and outrageous letter to be genuine. I transcribe his explanation of the incident as given by himself to his son-in-law:– MON CHER FILS,–Il mest arrivé de pouvoir, je crois, être utile au maintien des bonnes relations entre les marines anglaises et françaises.

John J Says:

I’m glad I found this website. Today I got this email from:
United States Postal (federal@usps.com)

Dear customer,

Your parcel has arrived at the post office on October 01.
Our Driver was unable to deliver the parcel to your address.
To receive a parcel you must go to the nearest UPS office and show your mailing label.
You need to print mailing label, and show it in UPS office to receive the parcel.

Thank you.
UPS Global Services.

Betsy de Jong Says:

Hi, I live in the Netherlands and got this today. Immediately checked to see if it was a scam and found this site. It’s obviously moved to europe.

Full ViewUPS Tracking number N965681
From: United States Postal Add to Contacts

UPS_label_ID0646.zip (26KB)

Good afternoon!

Your parcel has arrived at the post office on October 08.
Our Driver was unable to deliver the parcel to your address.
To receive a parcel you must go to the nearest UPS office and show your mailing label.
You need to print mailing label, and show it in UPS office to receive the parcel.

Thank you for your attention.
UPS Customer Services.

Diana Says:

I received the following email yesterday from the UPS telling me of a package that would arrive in three days. It contained an attachment which I downloaded thinking it was perhaps something I had ordered but had forgotten about…it contained a Virus which my Norton caught. Please be on the lookout…do not open the attachment!! You may not be so lucky!!

Subject: You need to get a parcel number 8865

Good afternoon!

The parcel was sent to your home address. And it will arrive within 3 business days.
More information and the tracking number are attached in document below.

Thank you for your attention
UPS Logistics Services.

ATTACHMENT: UPS Information Nr94696.zip (25.8 KB)

Dean Murphy Says:

“”;”C:\Documents and Settings\Dean Murphy\Application Data\Thunderbird\Profiles\6wt1m3u4.default\Mail\Local Folders-1\Junk:\UPS_invoice_7845.zip”;”Virus found FakeAlert”;”Object is inaccessible.”

( This is the report I get from my virus protection and I can’t seem to get it off my computer.) Can anyone help Dean?

Wanda Says:

I just got one today but it was from FedEx saying it was unable to deliver my package…I’m always home, I work at home and I don’t recall anything like this before…

Good afternoon.

The company could not deliver your package to your address.
The package was returned to FedEx office.
Information about your package is attached to the letter.
Look through the information about your package thoroughly.

Thank you for your attention.
FedEx Logistics.

CHARLNE Says:

THIS IS WHAT I RECEIVED
UPS®Customer Services
55 Glenlake Parkway, NE
Atlanta , GA 30328

Dear Customer,

We regret to inform you that the delivery of your shipment has been suspended for the following reason.

1. In line with new laws, items transiting through the EU are to be fully taxed and are subject to postal inspection by transitting postal authorities.

Concluding the inspection on the package it has been ascertained that adequate duties was not paid on the package.

Your name and email address were on the package for contact details.

Under new laws any package transiting through the EU is liable to full duties

payment. The sender did pay the appropriate courier fee but did not pay adequate duties on the package

the package . We are therefore requesting you pay full duty for the coverage of (Ђ) 119 Euros on the package.

To resume delivery, you are obligated to pay the duties on the contents of the package
You should therefore contact your assigned claims Officer, Carl Brooks to assist with the duty payment in
Spain ,where your package is currently being held
Below is the contact information of your assigned claims
Officer.

Name: Carl Brooks
Email address:carl-brooks @ups.claims.ir
Tel: 678-701 8046

Note:Duty coverage fees are payable to authorities through your assigned claims Officer.UPS® does not accept fees on behalf of foreign authorities.

When making contact with your assigned claims officer via email or phone please quote reference AU1033449378 and a confirmation of your name and address for for swift location of package details.

The status of your package can be tracked as soon as payment has been confirmed

Copyright © 1994-2010 UPS® , Inc. All rights reserved.

Peter Says:

Another twist on the UPS scam. Thanks to those of you who highlighted the flaws in the original, i.e. incorrect tracking code, UPS not collecting email addresses in order to contact you, spelling mistakes et al, the new version is to advise that your parcel has been delivered. Very clever, if you’ve actually sent a parcel.

Here is the raw header:
Message-Id:
Reply-To:
From: “UPS Shipments”

And here is the text.

Dear client
Your package has arrived.
The tracking# is : 1Z45AR990283797554 and can be used at :
ups.com/tracking/tracking.html
The shipping invoice can be downloaded from :
ups.com/tracking/invoices/download.aspx?tracking=1Z45AR990283797554

Thank you,
United Parcel Service
*** This is an automatically generated email, please do not reply ***

Fool me once, shame on you, fool me, can’t get fooled again (George W Bush)

JP Says:

Here is another UPS SCAM. I attempted to open the zip file, and my gut told me that an invoice would usually come as a .pdf not a zip. But still running my scan just in case.

UPS Delivery Message #8361015
From: UPS Add to Contacts
To: JP @ymail.com

ups-prnt-tr-copy-tr2398123234.zip (127KB)

——————————————————————————–

Dear!

We were not able to deliver postal package you have sent in time because the recipient’s address is not correct.

Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Hyanne Says:

Just received this today.

——————————–
From: “UPS Shipments”
Add sender to Contacts
To:

Dear client
Your package has arrived.
The tracking# is : 1Z45AR920283681749 and can be used at :
ups.com/tracking/tracking.html
The shipping invoice can be downloaded from :
ups.com/tracking/invoices/download.aspx?invoice_id=3483273

Thank you,
United Parcel Service

andyface Says:

I received the email below today from UPS Shipments - which seems to have been changed in the headers for the email from virus_11.livemail.co.uk - which seems a bit of a blatantly virusy email address. This and the fact I was waiting for a package to arrive (though not from UPS) meant that I clicked the first link without thinking too much about it - which linked to the genuine UPS site, though the tracking reference didn’t work. I then checked the link to the invoice (as that would be the natural next step to see what this was about) the link goes to an IP address with a .src file (windows screensaver, which I think can be used to deliver viruses) so it’s all rather clever in some ways as it’s not an obvious scam from the outset.

In short - even if it looks vaguely genuine, it can still be a big pile of poop.

Dear client
Your package has arrived.
The tracking# is : 1Z84GT990283674593 and can be used at :
ups.com/tracking/tracking.html
The shipping invoice can be downloaded from :
ups.com/tracking/invoices/download.aspx?invoice_id=3483273

Thank you,
United Parcel Service
*** This is an automatically generated email, please do not reply ***

U Says:

Got exactly the same email as Andyface on 18th January 2011 so this email must be doing the rounds. Totally agree that this is a really dangerous scam as it looks genuine especially as it comes from tracking@ ups.com. I made the mistake of clicking on the link as thought it was about a ups order I had made, and as andyface says it links to the genuine ups.com website. Worried that might have got virus as then stupidly clicked on invoice thinking what is this. Norton has not picked anything up but could something still be lurking around?? Run a virus checker on your machine to be sure. There are a few mentioned in previous replies. We use Malwarebytes’ Anti-malware for our regular check BM

Janice Says:

just got one that was for the same thing from

bakersfield. com

Howard Hill Says:

I have just received the following message and note that others have recieved one quoting a terra.com reply address.

Reminder:

Dear Customer,

We regret to inform you that the delivery of your shipment has been suspended for the following reason.
1. In line with new laws, items transiting through the EU are to be fully taxed and are subject to postal inspection by transiting postal authorities.
Concluding the inspection on the package it has been ascertained that adequate duties was not paid on the package.
Your name and email address were on the package for contact details.
Under new laws any package transiting through the EU is liable to full duties payment. The sender did pay the appropriate courier fee but did not pay adequate duties on the package .We are therefore requesting you pay full duty for the coverage of (?)119 Euros on the package.

To resume delivery, you are obligated to pay the duties on the contents of the package
You should therefore contact your assigned claims Officer, Jennifer Watson to assist with the duty payment in
Spain , where your package is currently being held
Below is her contact information of your assigned claims
Officer.
Name: Jennifer Watson
Email address:jwatson@ terra.com
Tel: 678 701 8046
Note: Duty coverage fees are payable to authorities through your assigned claims Officer.UPS® does not accept fees on behalf of foreign authorities.
Your old tracking number has been suspended due to non payment of tax.When making contact with your assigned claims officer via email or phone please quote reference Z195156475L12

The status of your package can be tracked as soon as payment has been confirmed
Copyright © 1994-2010 UPS Inc. All rights reserved.

Jeanette Says:

I also recieved the following scam emails:

UPS®Customer Services
55 Glenlake Parkway, NE
Atlanta , GA 30328

Hello (name)
I have been requested to help with the delivery of you shipment

We apologize for any inconvenience, however the tax imposed is out of our control and requested by authorities.

We understand you might not want to disclose your credit card details over the internet or the phone so Kindly make payment through our trusted 3rd party payment processors ,WESTERN UNION Transfer Services .You can visit any WESTERN UNION Agent Location

The fee you are to pay is (€)119 Euros

The fee should be payable to finance agent RF546738 : Mendez Raquel:

RECEIVER’S NAME: Mendez Raquel
ADDRESS:7,Calle Barcelona,
28786 Madrid
Spain

Once the payment is made,kindly email the payment MTCN reference number given to you by WESTERN UNION and the sender’s name address and contact number to
(jwatson@ terra.com ). Upon confirmation of payment we shall process and release the package for delivery immediately .

Jennifer

ODC 2817

>
> Reminder:
>
> Dear Customer,
> We regret to inform you that the delivery of your shipment has been suspended for the following reason.
> 1. In line with new laws, items transiting through the EU are to be fully taxed and are subject to postal inspection by transiting postal authorities.
> Concluding the inspection on the package it has been ascertained that adequate duties was not paid on the package.
> Your name and email address were on the package for contact details.
> Under new laws any package transiting through the EU is liable to full duties payment. The sender did pay the appropriate courier fee but did not pay adequate duties on the package .We are therefore requesting you pay full duty for the coverage of (?)119 Euros on the package.
> To resume delivery, you are obligated to pay the duties on the contents of the package
> You should therefore contact your assigned claims Officer, Jennifer Watson to assist with the duty payment in
> Spain , where your package is currently being held
> Below is her contact information of your assigned claims
> Officer.
> Name: Jennifer Watson
> Email address:jwatson@ terra.com
> Tel: 678 701 8046
> Note: Duty coverage fees are payable to authorities through your assigned claims Officer.UPS® does not accept fees on behalf of foreign authorities.
> Your old tracking number has been suspended due to non payment of tax.When making contact with your assigned claims officer via email or phone please quote reference Z195156475L12
> The status of your package can be tracked as soon as payment has been confirmed
> Copyright © 1994-2010 UPS Inc. All rights reserved.

——————————————————————————–
Mensaje verificado por el Antispam Terra.

——————————————————————————–
Este mensaje ha sido verificado por el E-mail Protegido.
Antivirus actualizado en 03/02/2011 / Versión: 0.96.4/12620

Jeanette Says:

If anyone knows what is the fastest way to report these people please post the info. I don’t have a lot of time but I sure would like to do my part.

Roman Says:

I have just received the message and note that others have recieved one quoting a terra.com reply address. Got the same message with the same email & tracking number :)

Bur Says:

Hi guys,

there’s another one going around. I haven’t done any checks, as I didn’t order anything from UPS…just deleted it.

It said something in the lines of your parcel will arrive in three days. It was a jpeg. The email was sent by support2pert@ ups.com .

There was also a ZIP file attached called document.zip .

MIS Says:

This got through our filtering system today. The email address it was coming from was infojs @ ups.com. The attachment was a .rar file, with an .exe in it.

NAL Says:

I got a similar one to Bur (4/3/11) and it said that my parcel was sent to my home address and will arrive within 7 business days. As I haven’t ordered anything or posted anything, I assume this must be a scam email with a virus in the attachment (file type .rar). I assume that I should delete it? That’s what the article says. :) BM

Jamie Fisher Says:

Got one today that came from joiner22 @ups.com. RAR attachment with exe.

sissy Says:

I got an email today from “UPS” and became suspicious when I know for a fact I have not ordered anything lately and it gave no tracking number in the link was a zip file. Only thing is mines said my package was delivered to my house will be delivered with in 7 bussiness days. I didnt open it and went straight to the net to see if there was a spam/virus going around. it was from info64@ yahoo.com

W Says:

Yeah, I got the same rar spam ups email yesterday. I thought it was real because I have been expecting packages to arrive lately.

THomas Says:

3/26/2011

twj says:

BEWAREI UPS SCAM
Four weeks !

got this scam email today:

From:
“Agnes Bliss United Parcel Service”

To:
Message contains attachments
1 File (509KB)

* UPS_TRACKING_NR_888278924.zipUPS_TRACKING_NR_888278924.zip

“Friday, March 25, 2011 11:04 PM
UPS Package

Good day,
We were not able to deliver parcel you sent on the 16nd March in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.”

The FROM and TO sites were obviously bogus.

I downloaded the alleged “Zip” file to a secure partition. THe zip file was titled:

UPS_TRACKING_NR_888278924.zip

It unzipped as an exe. file of the same name.

DO NOT OPEN!

Rob Says:

I received two copies of the recent incarnation of the UPS scam. The hint for me…7 business DAY…

Dear customer.

The parcel was sent your home address.
And it will arrive within 7 business day.

More information and the tracking number are attached in document below.

george Says:

I have just recieved 2 of these U P S scam e-mails. my wife often receives packages from America so I did not suspect anything dodgy,so I tried to open them up. My avast antivirus warned me of a dangerous virus although it never actually opened, is there a chance of any virus being left on my p c as I bank on line and am not sure what to do next. If the file was not opened, the virus wasn’t released. Do a full PC scan with anti-virus software. It’ll soon discover if you have a virus and in most cases, it should deal with it safely. BM

Jeff Says:

FROM: infosec@ ups.com

Dear customer.

The parcel was sent your home address.
And it will arrive within 3 business day.

More information and the tracking number are attached in document below.

Thank you.
© 1994-2011 United Parcel Service of America, Inc.

ZIP : UPS tracking number.zip

Bryan M Says:

DHL email

FROM: infoom01ahaxa@ dhl.com
SUBJECT: Important, Your Order Is Late
ATTACHMENT: dhl.zip

Dear customer!

The parcel was sent your home address.
And it will arrive within 7 business day!

More information and the traching number are attached in document below.

Thank you.

2011 DHL International GmbH. All rights reserved.

Also, received two UPS emails: one from “adsupport2@ups.com” one from “info42mcu@ups.com” with attachments “united parcel service document.zip” and “ups tracking number.zip”, respectively.

george Says:

Hi BM,

Thank you very much for your comments regarding our virus on our computer, we appreciate your assistance in this matter and we will check out our pc using your advice.

Thanks

Balthazaar Says:

They almost got me out of curiosity (the download part was the big tip off). I knew UPS wouldn’t want me to download anything and would at least use my name.
————————————————————————————
Dear customer.

The parcel was sent your home address.
And it will arrive within 3 business day.

More information and the tracking number are attached in document below.

Thank you.
© 1994-2011 United Parcel Service of America, Inc.

UPS-tracking.zip

Scared person Says:

55 days after this:

——————-
Jeanette Says: February 3rd, 2011 at 4:53 pm
I also recieved the following scam emails:

… party payment processors ,WESTERN UNION Transfer Services …

The fee you are to pay is (€)119 Euros. The fee should be payable to finance agent RF546738 : Mendez Raquel:…
———————-
They are STILL using the same RF546738 finance agent.

So I go to the Western Union web site to complain and … I can see no way to inform them of this.

Surely they should make it easier to report these criminals? It’s nothing to do with Wester Union though - what can they do?

Babak Says:

I have received an email

FROM:

United Parcel Service (info38fifh@ups.com)

TO:

(a 29 KB zip file was attached -> after extract ups.exe)

United Parcel Service notification #7513367 1

Dear customer.

The parcel was sent your home address.
And it will arrive within 3 business day.

More information and the tracking number are attached in document below.

Thank you.
© 1994-2011 United Parcel Service of America, Inc.

Mike Says:

The emails are sent with appalling errors - 5 grammar errors in 5 lines, like it was written by a pre-school child, no worse than that - like a ‘business gentlemen’ from Nigeria who has no understanding of the English language.

Why are people falling for this? Isn’t it obvious that it’s a scam or did you not go to school the day they were teaching the rest of the kids grammar?

Sorry to say but if you fall with nonsense, you deserve to get a virus. Message is clear - stop looking at getting something for nothing (not for free - that’s bad grammar!) and delete it.

Hope this helps!

Jackie Says:

Emailed to me from :
+44754088**** @ mediamessaging.o2.co.uk

Hello,

Here’s a picture message you’ve been sent from 0754088****.

You can send a message back from your mobile phone. But don’t reply to this email.

When I googled the mobile number it came up with UPS tracking, I didn’t open the attachment!

Thanks,

O2

Diane Says:

Thu, 21 April, 2011 3:15:55 AMUnited Parcel Service notification #6887
From: United Parcel Service

To: (multiple users, deleted for data protection purposes) UPS_Document.zip (6KB)

Dear customer,

The parcel was sent your home adress
And it will arrive within 5 business days

All information and the parcel number
are attached in document below.

Thank You
Copyright © 1994-2011 United Parcel Service of America, Inc. All rights
reserved.

So as you can see they just pick a name and then send it to multiple users and hope someone is stupid enough to open it. All zip files are usually viruses. So dont ever open if it doesnt look right or feel right - avoid it.

Mike Says:

I got one today from UPS Express Services #363584533
Wednesday, May 4, 2011 1:40 PMFrom: “UPS Mail”
I did not open it and deleted it so i have no idea what it was or what it had to say. However, the following was in the body of my email:

Dear customer.

The parcel was sent your home address! And it will arrive within 5
business day.

More information and the traching number are attached in document
below!

Thank you.
Best regards.

2011 UPS International GmbH! All rights reserved.

Dillon Says:

mine ran a virus test and said it was clean. i wasnt thinking and opened it. ha its like 3 in the mornin so im barely awake. hopefully the virus cant touch my mac. maybe juss pc virus

leah Says:

i receive UPS tracking # from adminyrjooneab@ ups.com. what it means by that?

UPS Express Delivery
tracking number # 7428528
Good morning
Parcel notification

The parcel was sent your home adress!
And it will arrive within 5 buisness days.

More information and the parcel tracking number are attached in document below!

Thank you
UPS Express Delivery system (c)
Copyright © 1994-2011 United Parcel Service of America, Inc. All rights reserved.

Steve Says:

Yep, I have an identical one to you Leah, even down to the tracking number :)

emily Says:

UPS Express Delivery notification #130827270‏

8:46 AM
Reply ▼

Attachment
UPS MAIL

Add to contacts
holy_joe@ hotmail.com, holy_johan@ hotmail.com, holy_johan

You marked this message as junk, so we’ll delete it after ten days.
Wait, it’s safe! | I’m not sure, show content
June 2011
UPS Express Delivery
tracking number #12012
Good morning
Parcel notification

The parcel was sent your home adress.
And it will arrive within 5 buisness days.

More information and the parcel tracking number are attached in document below.
Your password on the file Tracking - #12012
Thank you
UPS Express Delivery system (c)
Copyright © 1994-2011 United Parcel Service of America, Inc. All rights reserved.
Close ad

—that one is mine, just received it this morning, was worried because i am expecting a parcel, and its being shipped by ups (the legit one), any ideas where is this coming from? See comments above BM

Michael Says:

I received this one at about 10am today.

Reply-To: williampick@ upstrack.net

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: 8bit

Message-Id:
Date: Mon, 13 Jun 2011 13:45:51 +0000 (UTC)

Dear Prospective Employer, I applied for your position last week.

Could I get an update on my application? Your cooperation will be appreciated in this matter. My resume for your review is

upstrack.net/easytrackn.php?tp=6fb70f8d007bd4a9

regards, William Pick

The reply to is the same as sender.

Emily Says:

I recieved a different UPS email but sure it is likely the same issue. “United Parcel Service” was who it was from. To was listed a black hawk something or other, and CC was to a whole LOT of email addresses starting with b. When clicking on the doc file antivirus scanned it. says potential virus threat. anyone get these as well? Mine showed an ad it was likely copy pasted saying i would have a package arriving in three days information and tracking number included in attachment.

ad Says:

everyday I got not 1 but 20 or 30 of these ups spams !!
I use spamhilator and it works good,but they use everytime new mailadresses so I receive this spam alraedy for months !
Is there nothing what can stop these terrible junks ??

Wolfgang Says:

Got this email with invoice.dat enclosed.

Attention!
Dear Customer , We were not able to delivery the post package
PLEASE PRINT OUT THE INVOICE COPY ATTACHED AND COLLECT THE PACKAGE AT OUR DEPARTMENT
Best Regards , Your USPS Services

Right-click in this email and “select all” shows this hidden text:

Tag 57. What is Tag 57? Tag 57, Political Campaign Mailing, is a red container tag designed to provide visibility to political campaign mail while it is in the mailstream. Tag 57 is only intended to be used to identify trays and sacks political campaign mail sent by a political candidate, a campaign committee, or a committee of a political party to promote political candidates, referendums, or political campaigns. Tag 57 is not to be used for any other purpose. Who qualifies to use Tag 57, Political Campaign Mailing? Materials mailed via First-Class Mail or Standard Mail for political campaign purposes by a registered political candidate, campaign committee, or committee of a political party. This includes any public election – partisan or nonpartisan - for which there is a ballot. What types of mail do not qualify for Tag 57, Political Campaign Mailing? Mail from organizations, such as labor unions, religious groups, retiree associations, an d those that endorse specific candidates or political issues is not political campaign mail. Is the use of Tag 57, Political Campaign Mailing required on all containers of political campaign mail? No. It is optional, but the Postal service does encourage mailers to use the tag to identify trays and sacks of qualified political campaign mail while it is in the mailstream. Is Tag 57, Political Campaign Mailing reusable? Yes. Once containers of political campaign mail have been emptied, Tag 57 should be removed from the trays and sacks and retained by Postal service employees for reuse. How can I get a supply of Tag 57, Political Campaign Mailing? Contact your local post office. Can Tag 57, Political Campaign Mailing be used for non-partisan political campaign mail? Yes. Qualified non-partisan political campaign mailings must receive the same treatment as partisan political campaign mailings. Top of Page Mailing Assistance Who can assist me with designing my campaign mail piece ? Contact your local Mailpiece Design Analyst (MDA).

Try it. I think you will have the same effect in similar mails

regards Wolfgang

Janette Says:

I receive about 10of this sort of email everyday, some of them have a trojan others dont. My antivirus gets them everytime, but my antispam doesnt. I am just fed up of getting them.

DEAR CLIENT , We were not able to delivery the post package
PLEASE FILL IN ATTACHED FILE WITH RIGHT ADDRESS AND RESEND TO YOUR PERSONAL MANAGER
With Best Wishes , Your UPS Customer Services

GOOD AFTERNOON!
Dear Client , Delivery Confirmation: FAILED
Print out the invoice copy attached and collect the package at our department
With best wishes , UPS .com Customer Services

HELLO!
DEAR USER , RECIPIENT’S ADDRESS IS WRONG
Please fill in attached file with right address and resend to your personal manager
With Respect , Your UPS Services

I wish someone out there could do something to stop this malicious behaviour.

regards

Janette

Acorn Says:

me too..from
info.9 @ups.com..
junk checker on Panda caught it.

Penelope Says:

I also received the email on August 2nd, stating that a parcel has been sent to my home address and should arrive in 3 days. There was an attachment to be opened, titled something with the word ‘document’. The email was sent from info 2. About ten days later I received it again, twice, from info 8. The hidden text ‘wolfgang’ mentions is in my opinion very revealing… or misleading. Here is some info about my case: About 5 days before receiving the email I sent and application for a driver’s license replacement to the Department of Motor Vehicles in New York. I sent the application from overseas (Greece) after having lost my NYS license, so I was expecting mail, although not from UPS. I think its quite a coincidence that the email was sent now, when I was expecting mail. I have been living overseas for some time and hardly ever get mail from the States, let alone special delivery parcels. As for political campaign mail, I know for a fact that I have been on at least one politician’s list for years now … so why did I received the email 5 days after I sent the application and was expecting a reply? Someone is keeping track of my mail… is my first thought!! Someone in the postal service… Just because you are paranoid doesn’t they are not watching you! :) BM

Rainer Urbach Says:

They are getting better: I received a similar mail from UPS TEAM 35 with a lot of links. I right-clicked on a link and checked the Properties: they were quite fishy. Too bad for these clowns that you can google them out in a heartbeat to find out who they are.

dodgy timeshare Says:

I am a blog spammer and I’m involved in timeshare. I have no interest in this blog or the article, I only want a link, because I’m as dodgy as the business I’m involved in haha! I would normally delete a spam message from people just looking for links, but I find it refreshing that this person is being honest about their intention :) BM

boscar Says:

payment most be send through western union service and save to text phon +229 97 184397
i live in benin rep.am a businessman IMPORT/EXPORT purchase in container atlantic express/shipping i have lot of friends both abroad who alwalys like to hear about me and they ask me my personal info to payment as order secure personal , to receive those payment/delivery documents order purchase to company microsoft service, dhl service, alibaba service, yahoo service, internet explorer service bing service web broswer To mail: 01 bp 63-64 cotonou. kindly safe guide sender info documrnts internet disable post mail and text message above Thanks for your understand
NOW, TO PROCCESS PAYMENTEST western union servive mail post document payment above!

1. name
2. name
3. serder’s country ;
4. MCTN payment

note: pls kindly secure transfer payment to this attach email amaka54 @live.fr legal to avoid inconviness !

THANKS

WITH HOPE TO HEAR FROM YOU URGENTLY.

YOUTS FAITHFULL

CUSTOMER

M Says:

I got one today from “info@usps.gov” (an address which does not exist, as the postal service uses a .com suffix) with the following message:

Hello!

Unfortunately we failed to deliver the postal package you have sent on the 12th of November in time because the recipient’s address is erroneous.

Please print out the shipment label attached and collect the package at our office.

United States Postal Service

CG Says:

I received the same e-mail as M above… Looks like a Fishing attempt. The funny part is I actually mailed something the last week that has not yet arrived. So it was close to get me to do something about it. (See Below)

Hello!

Unfortunately we failed to deliver the postal package you have sent on the
12th of November in time because the recipient’s address is erroneous.

Please print out the shipment label attached and collect the package at our
office.

United States Postal Service

CG Says:

Looks like the United States Postal Service has issued the following warning from their Website.

BEWARE OF SPAM!
BOGUS DELIVERY MESSAGES E-MAILED TO
POSTAL CUSTOMERS

Some postal customers are receiving bogus e-mails about a package delivery. The e-mails contain a link that, when opened, installs a malicious virus that can steal personal information from your PC.

The e-mails claim to be from the U.S. Postal Service and contain fraudulent information about an attempted or intercepted package delivery. You are instructed to click on a link to find out when you can expect your delivery. But Postal Inspectors warn: Do not click on the link! Like most viruses sent by e-mail, clicking on the link will activate a virus that can steal information—such as your user name, password, and financial account information.

What to do? Simply delete the message without taking any further action. The Postal Inspection Service is working hard to resolve the issue and shut down the malicious program.
If you have questions about a delivery or wish to report spam, please call 1-800-ASK-USPS.

trollisaur@yahoo.com Says:

The email sender’s email address was

info@ usps.gov

The email address seems very real but I know it isn’t. Scary.

Some guy Says:

I recived something similar.
i dunno who was sent by o why cuz i just delet obvious trash …. as u all should.

Roxanne Darling Says:

I received an e-mail as follows:

UPS Tracking Number 322127170
From: United Parcel Service
tracking@ ups.com To:
Bcc: seawaydesigner@ aim.com
Date: Tue, Nov 22, 2011 12:22 pm
Attachmentinvoice322127170.exe

Hello!

The courier company was not able to deliver your parcel to your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly!

Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.

Please do not reply to this e-mail, it is an unmonitored mailbox

I mailed my parcel at the Post Office in a nearby town, so when I got this e-mail I went to the PO that I mailed my parcel from, they said it would have gone to my home PO. As stated above I was to print out this invoice to claim my parcel…when I attempted to do this I rec. A BIG FLAG ALERT for a trojan/virus and it wouldnt allow me to access.
I called US Postal service to see if the parcel was still there due to a weeks delay on my part. I still can’t find out anything, so I tried to connect to tracking@ ups.com and saw this warning. Is it the same? Worried. My parcel was for a teaching job in another state.
This appears to be a malicious spam email and not from UPS. Ask yourself a few things, why would they send you an email without using your name as a greeting and when you posted your parcel, where, on the form you had to fill out, was there a question asking for your email address? There wasn’t, was there? BM

Ian Withers Says:

Received Jan 16, 2011 - same Spam dhl address!!

Error in the delivery address
DHL USA Services [help @dhl.com]

Dear customer.

Your package has been sent to your address.
Please find a post label attached which contains a track number of your package.
You can find out an exact date of the delivery with the help of the track number.

Thank you.
DHL Customer.

Jessica Says:

Received email from Steven parrish saying parcel being held in Cincinnati due to error in delivery address. Costs 21.75 a day to hold package. Then says from USPS. There is an attachment I will not open.

Annette Says:

From: Postal Service (manager@ usps.com)
Delivery information,

Courier service couldn’t make the delivery of your parcel.
Status\Wrong postal code.

LOCATION OF YOUR PARCEL:Spokane
STATUS OF YOUR PARCEL: not delivered
SERVICE: Express Mail
:U226090497NU
FEATURES: No

Label is enclosed to the letter.
You should print the label and show it in the nearest post office to get a parcel.

An additional information
If the parcel isn’t received within 30 working days our company will have the right to claim compensation from you for it’s keeping in the amount of $16.37 for each day of keeping.

You can find the information about the procedure and conditions of parcels keeping in the nearest office.

Thank you.
USPS Express Services.

jamaica salagoste Says:

i need my passport as soon as posible . nung may 18 pa dapat na deliver to ,until now walang dumadating na passport sa amin plsss make it asap. kung pwede madeliver nato ngaun .. Please read the article. If you have been duped to sending your passport to someone, you need to contact the police straight away. BM

julie Says:

I received the same today quoting U990833333NU location Ontario

Kok Yuan Says:

I also receive a email from UPS, the email look like this
From: United Parcel Service
To: xxxxyuan@ yahoo.com.sg (edited)

Dear customer.

The parcel was sent your home address.
And it will arrive within 6 business day.

More information and the tracking number are attached in document below.

Thank you.
Š 1994-2011 United Parcel Service of America, Inc.

Attachment: UPS_document zip

When try to open the zip files it was an virus, it this an email scam? Er, I would thinks so, wouldn’t you? :(

Kok Yuan Says:

The above email stated clearly but I neither have a UPS account nor make any purchase to have a parcel sent to me.

So, should I regard this email as a scam as it was also sent to Email: alyh516@ yahoo.com.sg. After everything that’s written above, by me and by the other commenters, I’m biting my tongue not to answer sarcastically :) Think about it logically. Why would they send the same email with the same information to more than one email address if it wasn’t a scam?

Chantall Says:

I met someone that was suppose to send $2000.00 Us dollars to me…They asked for my email add… which is xxxxxxx @gmail.com (edited)
The person that suppose to send the package is one Bryan that I met on nelog service…He is sending this money so that I could purchase my own pc…The email was received from Mr Robert Arthur…There was a form attach that I had to complete with all my details This is the email add that I had to send my info to… UNITED_PARCEL_SERVICE@ deliveryman.com
No address no tracking no…

I think I have been had…LOL…I phoned Ups…They told me they dont work with cash…Can you please email me a response. Have you notified the police to let them know that you have been the victim of identity fraud? BM

JVW Says:

From: UPS Service [mailto:activity@ ups-usa.com]
Sent: Tuesday, August 14, 2012 6:39 AM
To: **********
Subject: Error in the delivery address ID#17119

This is what I recived. I emailed ups last week and still have not heard anything back. That’s probably due to the fact that it’s a scam and nothing to do with UPS. :) BM

Sara Johnson Says:

So, I got one that was sent to my mother. She forwarded it to me thinking it had something to do with the numerous pairs of shoes I have been ordering and returning. So, being oblivious, I opened it and tried to download or print the label. The crazy thing is it was an actual label that had been used in one of my recent transactions. And that order/return has not been processed yet. But the email exactly matches the ones listed in this thread. I am not sure what to do about it? Although I was a bit confused why my mother had gotten this email in the first place, since the label had my name and info on it. And the subject said, “You should go to the post office” yet it was regarding a UPS matter. I have opened/downloaded this file. Now what? Any suggestions? Thanks! Sara, run a piece of spyware/malware sofware on your machine, like Malwarebytes, to find out if your machine is affected and then use the programme to delete it. BM

Maria Says:

I keep getting UPS scam emails to my hotmail account. They are so stupid and annoying.

It’s from: UPS Services

services@ upshelp.com

Unfortunately we have failed to deliver the postal package you sent on the 27th of August in time because the recipient’s address is erroneous. Please print out the label copy attached and collect the package at our office.

Okay dufface..where is your office and what parcel did I send out on that day?

Ana Says:

I got one.

exact.delivery@ us-ups.com

It was a clickable image which had the following on it:
[UPS LABEL]

Unfortunately we have failed to deliver the postal package you sent on the 27th of July in time because the recipient’s address is erroneous.

Please print out the label copy
attached and collect the package at our office. Thanks Ana, this is a new one to us.BM
[button]

Chuck Says:

First time I’ve ever received a scam email that was so blatant. Clickable image pointing to .htm page on alpha-industries.be. Message recieved from bigeyeproductions.com with spoofed address of information@ upshelp.com. Image reads:
——
UPS logo with ‘We Logistics’

Unfortunately, we failed to deliver the package that you have sent on the 27th of August in time, because the recipients address in erroneous.

Please print out the label copy attached and collect the package at our office.

—–

Clicking on the image brings up a save file dialog for a file called Label_Copy_UPS.zip. The zip file contains a single file, Label_Copy_UPS.exe, with a Word icon. Malwarebytes recognizes Spyware.Zbot in the file.

Rosa Says:

I receive the following email today with attachment, but I didn’t open it:

From: YOUR UPS
Title: Delivery problem # Error ID90505‏
Attachment: src=ttp://www.oldtimehotel.com/PDCPPJLHHZO.jpg

2012/05/06 2:04pm (Toronto)

Jason Says:

I received this from helpdesk@ ups.com

It’s bogus but tracking number is real, just not mine.

Dear Customer,

Your Parcel has been returned to the UPS office nearest you.
The reason for the return is as a result of incorrect delivery address information. Kindly click on the below link to update us with your Mobile Number and in less than (42 hours) an agent will contact you on phone to correct your delivery address to enable delivery of parcel.

To update us with your Mobile Number, please Click Here and enter the below tracking number of parcel.

Tracking # (1Z9575R2P297341747)

Note: Ensure you enter your correct email information and Mobile Number to enable us reach you on phone.

UPS Logistics Service.
*********************************
Copyright

C W HUGHES Says:

My wife received two emails from UPS stating that delivery could not be made and gave links to follow. It included a Tracking Number that I copied and input in UPS’ tracking system. It was a valid number, but the package was delivered to an address in Arkansas three weeks ago.

J.N. Jenn Says:

Sounds like I just got the same email as Chuck and Ana.
Stated it was from the ‘UPS Customer Service’ and came from the following email ‘questions@notice-ups.com’
With the subject head “Delivery refuse ID#93674″

The whole message in the email is a click-able image.
——————
(At the top is the UPS logo on it with ‘We Logistics’.)

Unfortunately, we failed to deliver the postal
package that you have sent on the 27th of August in time,
because the recipient’s address in erroneous.

Please print out the label copy
attached and collect the package at our office

(Print shipping label button)
———————

Jeff Says:

From: “Your UPS”
Date: September 20, 2012 1:31:48 PM PDT

Same garbage, better email address. The “label” is an exe file.

Mathias Schlienger Says:

Here’s a new one I recently received. This email arrived from the address priority@ UPS-support.com. It had this written in it
___________________________________
Delivery information,

We couldn’t deliver your parcel at your address.

Reason Wrong data delivery.
LOCATION:Riverside
STATUS: sort order
SERVICE: Expedited Shipping
Parcel number:U353149365 NU
INSURANCE: No

The label of your parcel is enclosed to the letter.
Print your label and show it at the post office.

An additional information:
If the parcel isn’t received within 30 working days our company will have the right to claim compensation from you for it’s keeping in the amount of $15.94 for each day of keeping of it.

You can find the information about the procedure and conditions of parcels keeping in the nearest office.

Thank you.
UPS Express Services.
______________________________________

It had the scam attachment, so I knew not to open it, but be careful, the scammers are actually using UPS addresses.

Tara Says:

I received this today:

From:UPS Customer Service (customer-services@ upss.com)

1 attachment | Download all as zip (34.6 KB)
UPS_Label_Copy_US_ID29126.zip (34.6 KB)

Postal notification,

We couldn’t deliver your parcel.

Reason deny: It’s not right specified size and the weight of parcel.
LOCATION OF YOUR PARCEL:Cincinnati
DELIVERY STATUS: sort order
SERVICE: Express Shipping
Parcel number:U333392189 NU
INSURANCE: No

Label is enclosed to the letter.
Print a label and show it at your post office.

Information in brief:
If the parcel isn’t received within 30 working days our company will have the right to claim compensation from you for it’s keeping in the amount of $11.88 for each day of keeping over limited time.

You can find the information about the procedure and conditions of parcels keeping in the nearest office.

Thank you for attention.
UPS Global Mail.

CatcalledEd Says:

I receved one on the 21st October (yesterday) from the address:

UPS Express Services (airfreight.service @service-ups.com)

This address looks to be more legit than any of the others here but the thing that clued me in was that it said that I sent a package on the 27th September that was undeliverable. Well guess what!? I didn’t!!

Art Says:

Received this message on October 22, 2012 from : exact-delivery @postal-ups.com

Unfortunately we failed to deliver the postal package you have sent on the 27th of September in time, because the recipient’s address is erroneous.

Please print out the label copy attached and collect the package at our office.

When I clicked on print button, an applet activated and I got a message that this program might harm my computer. At that point I suspected about the message and googled to find if this is a scam. Thanks for your postings. You are most welcome. BM

sandy Says:

I received 2 separate emails dated 14th Nov and again today. They were in my junk folder but I do get some genuine emails that end up in there. I have had a dispute re a purchase on ebay not received and was tempted to open the 1st email but decided against it. I figured that I would have received notification of a tracking order through ebay.
number 1 was from Mr Andres Ricardo info@ ups.org
number 2 was from Mrs Sarah Dough setupspot @blumail.org

The subject read exactly the same:_
re Your package has experienced an exception. Tracking Number 1Z38T1F90496380256

I have not opened them.

Lynsey ather Says:

Hi just recieved an email from ups inc, I know for a fact I’ve ordered nothing! So think it may be a scam, email was as follows:

UPS Notification
Our company`s courier couldn`t make the delivery of parcel.

REASON: Postal code contains an error

DELIVERY STATUS: sort order
SERVICE: Two-day shipping

NUMBER OF parcel: 7I8PI0WRAP
FEATURES: No

Open the attached file for details.

An extra information:

If the parcel isn`t received within 10 working days our company will have the right to claim compensation from you for it`s keeping in the amount of $4.44 for each day of keeping of it.
Thank you for using our service.
UPS Global

********THERE WAS NO ATTACHMENT AND WHEN I EMAILED THEM BACK GOT NPTIFICATION FROM POSTMASTERS SAYING NO SUCH EMAIL ADDRESS…….scam??? Absolutely :( Unless you have an active account with UPS, Lynsey, how would they know your email address? On top of that, any genuine email, from any company, will open with a salution that will include your name. There are dozens of more warnings in scam emails, but if there is no personal salutation and you haven’t supplied your email address to the company, you can be 99% certain that it’s a scam email :)

Leave a Reply





SEO Blog

SEO Blog

The Big Man's SEO blog is primarily aimed at website owners looking for ethical SEO tips, optimisation advice and who are interested in reading articles and opinions related to search engines, the internet, technology and software.