UPS Tracking scam email

UPS Tracking Email Scam

This is only a quick blog  article to warn against opening any UPS tracking email that comes into your inbox.

The scam email that reached my inbox, supposedly came from Phillip Thurman and his email address was dampened @ seattleio.com. It had the subject line UPS Tracking Number QBR0YT2 and said, “ Hello! Unfortunately we were not able to deliver the package sent on the 1st of June in time because the recipient’s address is not correct.

Please print out the invoice copy attached and collect the package at our office.

Your United Parcel Service of America

Obvious Scam Email

Big warning signs on their UPS email:

  • UPS would always use your name if they were emailing you
  • UPS would always send from a UPS email address
  • UPS would always include their company details on the email
  • UPS would never send you a .dat file to open

The .dat file attached on my email was UPSNR_be23c5be.dat. I don’t know what it does. It appears to go into your system files, so it could be a trojan, or probably spyware - whatever it is - you don’t want it in your computer. Don’t open it - just highlight and hit shift+delete.

My UPS tracking email came from Phillip Thurman and his email address was dampened @ seattleio.com, but if you received one from a different email address, let us know and we’ll publish it here.

That’s it, you have been warned!

184 Responses to “UPS Tracking scam email”

Sean Says:

I received the same UPS tracking email containing the same attached file. It was from “Teddy Walton eyrieq43 @ startifa.com”.

alice boee Says:

I recieved the same UPS scam email with the exact same dat file attached.
The sender was: Lynette Miles displayingn78 @ sportchek.ca 8/7/09

shelley Says:

I rec’d the same thing today from Dolly Stahl caesars3 @ stevensbikes.de.

Daniel Cameron Says:

I also received the same UPS tracking scam email from: Colette Jordan utteranceii762 @ savantint.ru

Matthew Barrett Says:

Not sure why this is, but I’m now getting at least one of these each DAY!! Our spam filter doesn’t get them, but our virus protection. Report says as follows:

McAfee reports virus [Bredolab.gen] during MIME scan
Authentium reports virus [W32/Bredolab.D] during MIME scan
Panda reports virus [Trj/Sinowal.WMF] during MIME scan
McAfee reports virus [Bredolab.gen] during message scan
Authentium reports virus [W32/Bredolab.D] during message scan
Panda reports virus [Trj/Sinowal.WMF] during message scan
ThreatSeeker reports virus [Suspicious Attachments(UPSNR_1061846f.exe)] during part scan.

So bottom line is only open this if you are virtually suicidal

dawn Says:

We just received this.
Has anyone notified UPS??? I just did.

Coreolis Says:

I received another UPS tracking email this morning:
From:Bridget Blanco bilkedajc @ spiel-palast.de
Subject: UPS Tracking Number B81OLEQ
Zip File: Dof2984b8.zip

R MacGregor Says:

We got one of these today and spam did not detect it but virus protection did. detail UPS Tracking Number 8364047432
Marsha Atwood [friskingiot@shelkovo-info.ru]
As a liberal I hope they shoot the B*******!

Tim Woodcock Says:

I got one from ‘tracking@ups.com’. It contained a file called ‘warning.htm’ which was 873B. I have not opened it!

Di52 Says:

This got by AVG and my email provider. Of course the UPC contact email/website has so many irrelevant fields there is no way to email them:

Attachment: Your_UPS_feea.zip(51.3KB)

Hello!

Unfortunately we were not able to deliver your postal package sent on the 21st of June in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

——————————————————————————–

No virus found in this incoming message.
Checked by AVG - www.avg.com
Version: 8.5.421 / Virus Database: 270.14.5/2419 - Release Date: 10/07/09 05:18:00

Melchor Says:

I just got this UPS mail. One thing that’s different is that they are now using emails that have the @ups.com addresses.

Mine came from:

UPS Delivery Problem NR.31493
UPS Manager Tyrone Pike
———————–
Hello!

We failed to deliver the postal package you have sent on the 11th of July in time
because the recipient’s address is incorrect.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

————–

not scammed Says:

Hello!
The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.
You may pickup the parcel at our post office personaly!
Please attention!
The shipping label is attached to this e-mail. Please print this label to get this package at our post office.
Please do not reply to this e-mail, it is an unmonitored mailbox.
Thank you.
United Parcel Service of America.

As a post office worker I know damn well that parcels cannot be initially shipped without a receiving address.. people who fall for those are just morons.

H Says:

I got the same from

UPS Manager Jerald Powers [tracking@ups.com] which read

Hello!
The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.
You may pickup the parcel at our post office personaly!
Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.
Please do not reply to this e-mail, it is an unmonitored mailbox.
Thank you.
United Parcel Service of America.

It’s the “Please attention!” bit that gets me - surely someone at the scam bastards’ hideout has worked out by now that this is a dead giveaway? BM

Nicola D Says:

My e-mail said the following:

UPS Tracking Number 9971173.Wednesday, 13 January, 2010 6:35 PM
From: “UPS Manager Samuel Yoder” Add sender to ContactsTo: redbox91 @btopenworld.com Message contains attachments1 File (27KB)UPS_invoice_NR67974.zip

Hello!

The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly!
Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.
Please do not reply to this e-mail, it is an unmonitored mailbox.
Thank you.
United Parcel Service of America

D Says:

I just received a version of this today.

From: UPS Manager Dolores Brown
Subject: UPS Tracking Number 8441868

Hello!

The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly!

Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.

Please do not reply to this e-mail, it is an unmonitored mailbox.

Thank you.
United Parcel Service of America.

The return address if you right click and “view properties” says support @ups.com, but if you look at the details tab the return path is connoisseurs4 @learnyourscore.com. The attachment is named UPS_invoice_NR76234.zip

Naomi Says:

I got the same one as above, but from “UPS Manager Bettie Keller” with a fake ups.com return addy. Bogus tracking number, in the subject line (unmistakably bogus if you ever actually use UPS.)

duncan Says:

got one of these today from daxar @btinternet.com dont trust it - same as all the others

Hello!

The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly!

Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.
Please do not reply to this e-mail, it is an unmonitored mailbox.
Thank you.
United Parcel Service of America.

Stuart H Says:

I have just received this lot from so called “UPS”.
It’s not my email address but it still got through and my Kaspersky Internet security picked it up as a Trojan. as you can see it has a download of an invoice in WinZip.
Regards
Stuart H.

UPS Tracking Number 2503912.
Friday, 15 January, 2010 5:14
From:
“UPS Manager Cheryl Arrington”
Add sender to Contacts
To:
stuarts009 @yahoo.co.uk
Message contains attachments
1 File (27KB)

* UPS_invoice_NR34712.zipUPS_invoice_NR34712.zip

Hello!

The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly!

Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.

Please do not reply to this e-mail, it is an unmonitored mailbox.

Thank you.
United Parcel Service of America.

Sonya Says:

Just got one this morning that said:

UPS Tracking Number 0157705.
Thursday, January 14, 2010 7:30 PM
From: “UPS Manager Kristin Morton
To: sonya @illuminatedwisdom.com

Message contains attachments 1 File (27KB)UPS_invoice_NR67974.zip

Hello!

The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly!
Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.
Please do not reply to this e-mail, it is an unmonitored mailbox.

Thank you.
United Parcel Service of America.

Vince Says:

Just got one as well. “Please attention”. Awesome work, scammers!
Mine was from ‘ohsosweetgenna’. Can’t remember the rest as I deleted it before I saw this blog.

Diana Says:

UPS Manager Zelma Hancock [parcel @ups.com]

Hello!

The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly!

Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.

Please do not reply to this e-mail, it is an unmonitored mailbox.

Thank you.
United Parcel Service.

P.Jones Says:

I was actually expecting a delivery via UPS this week so when an EM dropped into my spam box from ‘Parcel at UPS.com’ I opened it - fortunatly my Norton security popped up with a dire warning. Of course there was a similar message as the others on here i.e. error on shipping address etc so ignored the attachment & deleated it. next day the same EM in my spam box - cheeky s-ds!!

JOHN KENNY Says:

RECIEVED THE FOLLOWUNG E-MAIL ON 15/1/10,

Hello!

The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.

You may pickup the parcel at our post office personaly!

Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.

Please do not reply to this e-mail, it is an unmonitored mailbox.

Thank you.
United Parcel Service.

Andrea Picton Says:

I got this today, the attachment looks like a virus:

UPS Tracking Number 3707356.
From:
UPS Manager Corina Hogue
UPS_invoice _Nr78155.zip (43KB)

Dear customer!
The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.
You may pickup the parcel at our post office personaly!

Please attention!
The shipping label is attached to this e-mail. Please print this label to get this package at our post office.

Please do not reply to this e-mail, it is an unmonitored mailbox.

Thank you.
United Parcel Service.

Andrea Picton Says:

I should have added I did actually recieve a UPS delivery today.

Ray Says:

I just got one from DHL Manager Evangeline Contreres, and the email address it comes from is shipping @dhl.com

JENNIFER SMILES Says:

I HAVE RECEIVED TWO EMS FROM UPS TODAY, I THOUGHT I COULD DETECT A SCAM EASILY, I WAS WAITING FOR A PARCEL, I WAS TOLD BY YAHOO TO NOT OPEN THE MESSAGES UNTIL THEY WERE CLEANED UP, I JUST THOUGHT THAT THEY HAD NOT RECOGNISED THE SENDERS ADDRESS, SO LIKE AN IDIOT I HAVE OPENED THE ATTACHMENT, TOOK THE LETTERS TO THE PO ONLY TO FIND OUT THAT THEY ARE SCAMS, I HOPE THEY HAVEN’T MESSED WITH MY PC, PEOPLE LIKE THESE NEED TO GET A PROPER JOB

ak470125 Says:

I just received this today addressed by UPS Support Dolly Mcmillan

From: UPS Support Dolly Mcmillan
To: angela.wientjes @rogers.com
Sent: Tue, January 26, 2010 11:58:22 AM
Subject: UPS Delivery Problem NR 32453.

Hello!

“We were not able to deliver the postal package you have sent on the 26th of January in time because the addressee’s address is inexact. Please print out the invoice copy attached and collect the package at our department”

United Parcel Service of America.

A Crawford Says:

Just rec email today from
UPS Delivery Problem NR 26620.‏
From: UPS Support Christa Kruse (tracking @ups.com)
You may not know this sender.Mark as safe|Mark as junk
Sent: 26 January 2010 18:20:13
To: abulkassim1986 @hotmail.fr
1 attachment
UPS_invoi…zip (31.3 KB)

deleted straight away

kathleen richards Says:

i got one today from ”
upssupport austin posey”…..have they nothing else to do in their sad little lives

Sam M. Says:

Notice: “UPS” address, bcc address?, excess punctuation (periods). Here’s the garbage:
————————————
Subject: UPS Delivery Problem NR 97734.
From: UPS Support Wilfred Patel
To: cr4390 @netscape.net
Date: Tue, Jan 26, 2010 8:35 am
Attachment: UPS_invoice__NR1144.zip

Dear customer!

Unfortunately we were not able to deliver the package sent on the 19th of
December in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our
office.

United Parcel Service of America.
————————————

Herman Munster Says:

Funny thing is the To: address shown below is not my correct email address (not really even close, off by about 5 letters), but yet it still came to me.

The from email address looks like a UPS.COM address.

Subject: [SPAM]UPS Delivery Problem NR 75475.
Date: Wed, 27 Jan 2010 06:55:01 +0000
From: UPS Support Robin Bradley
Reply-To: creeps0 @DrasticMove.com
To: frasman @bellsouth.net

Hello!

Unfortunately we were not able to deliver your postal package which was sent on the 20th of December in time
because the addressee’s address is inexact.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

UPS Delivery Problem NR 75475

Bryan F Says:

Get one a day. Thankfully my service provider is blocking it. This is what I get every day.
From: “UPS Manager Floyd Harrell”
Subject: UPS Delivery Problem NR 16748.
Virus: PSTN-MalwareDetection
I guess I should be happy though, Mr. Dr. Professor Magula Uhmbimbway said I have a dead relative in London that left me 500 million dollars! AND I won the Microsoft Email Giveaway of 10 million dollars. I love the internet, it made me a millionare! LOL

Peter Says:

I also received a couple of these emails from “UPS Manager Antonia Christopher” and it goes like this:

Hello!
The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.
You may pickup the parcel at our post office personaly!
Please attention!
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.

Please do not reply to this e-mail, it is an unmonitored mailbox.

Thank you.
United Parcel Service of America.

Kelly Says:

Mine was sent from service@ ups.com
Dear customer!
Unfortunately we were not able to deliver the postal package sent on the 18th of December in time
because the addressee’s address is wrong.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

that was the mail

Karen Says:

Got one today.

Attachments: 1 attachment
UPS_invoi…zip (30.6 KB)

Hello!

We failed to deliver the package which was sent on the 5th of December in time
because the recipient’s address is erroneous.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

Juan Says:

This is the mine:

Dear customer!

We failed to deliver the package you have sent on the 16th of January in time
because the recipients address is inexact.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

UPS_invoice_NR4567.zip

Nick Says:

I got this same email, but mine seemed to come from parcel@ ups.com. It had the zip attachment with the Bredolab.gen in it. McAfee made it go boom on my PC. [My mac doesn’t have these problems:D]

Amb Says:

Here are info:

Received: from 213.148.146.186 by mailwash27.pair.com; Mon, 1 Feb 2010 20:08:28 +0100
From: “UPS Manager Scot Ledford”
Return-Path:

Message was: Hello!
We were not able to deliver the postal package sent on the 4th of December in time because the addressee’s address is incorrect. Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Isobelle Says:

From: “UPS Manager Alyce Pierre” To: phildent@ primus.com.au Subject: UPS Delivery Problem NR 58344. Sent: Mon, 1 Feb 2010 12:40:35 -0700
United Parcel Service of America. UPS_document_Nr28451.zip (35.2 KB)

CAMPBELL MURRAY Says:

Dear customer!

Unfortunately we were not able to deliver your postal package which was sent on the 2nd of January in time
because the recipient’s address is erroneous.
Please print out the invoice copy attached and collect the package at our department.—– Original Message —–
From: “Service Manager Derek Brennan”
To:
Sent: Monday, February 01, 2010 5:47 PM
Subject: UPS Delivery Problem NR 84717.

United Parcel Service of America.

Melissa Says:

This is the one I got. The sender’s address made me think that it was almost legit until I checked the .zip file and it had a .exe (executable) file inside. I do not trust that in any way. so here’s the copy:

From: Manager Evangelina Bentley
Date: Monday, February 01, 2010 7:48 PM
To: (had a similar email to my own)
Subject: [Bulk] UPS Delivery Problem NR 47752.
Attach: UPS_document_Nr4772.zip(35.2 KB)

Dear customer!

We were not able to deliver postal package you have sent on the 27th of December in time
because the addressee’s address is incorrect.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

Christine Says:

The email I got was from “UPS Manager Alyssa Bartley [delivery@ups.com]” and it was sent to “dinorah@dcalkins.com” which is no where close to my email address. The message reads: Hello!

Unfortunately we failed to deliver your postal package which was sent on the 16th of December in time because the recipient?s address is wrong.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

claire Says:

Got this one today. Seem to be getting at least one a day!

Dear customer!

Unfortunately we failed to deliver your postal package sent on the 4th of January in time
because the addressee’s address is inexact.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

delivery@ups.com

MC Says:

Just got one:

Subject:UPS Delivery Problem NR 15072.
From:”Service Manager Carmine Goodwin”

UPS_invoice_Nr19373.zip

Boris Says:

I got one today - and I don’t even live in a country that has UPS!

When I tried to delete it normally, as in send it to ‘trash’, AVG detected a threat every time. I didn’t attempt to open it. If I tried to block the sender AVG would detect a threat. The only way I could get rid of it was the shift+delete shorcut to permanently delete it.

Never come across that before.

David Says:

This is a scam. Mine came as an executable file. The file isn’t even a document. Do people really fall for these? Unfortunately, yes they do.

SMitchell Says:

Also received this type email from “Manager Erwin Herrington” delivery@ ups.com

file was a zip file UPS_invoice_Nr27451.zip.

I deleted the email and didn’t open the file.

Cynthia Says:

Received Feb.4,2010 from Zelma Pate help@ dhl.com
Hello! The courier service was not able to deliver your parcel at your address.

Cause: Mistake in address

You may pickup the parcel at our post office personally.

The delivery advice is attached to this e-mail.
Print this label to get this package at our post office.

Please do not reply to this e-mail, it is an unmonitored mailbox!

Thank you,
DHL Global Forwarding Services.

When I viewed the source the return path was to:mousierm62@ marathonworldcup.com

Needless to say this is a scam!

Paul Says:

I’m getting several of these a day
First UPS then DHL and now supposedly from Google!

Victor Says:

Dear Sir/Madam,

For a long time, I’m being bombarded with this scam entitled UPS DELIVERY PROBLEM Nrs, varied…Unfortunately we failed to deliver your postal package which was sent on the 16th of December in time because the recipient?s address is wrong. Please print out the invoice copy attached and collect the package at our department. Can you tell me how to stop it, I have a Mac computer. Hope to hear from you kind regards, Victor There’s nothing you can do to stop them being sent to you, Victor. Either invest in a spam service like spamarrest, or simply delete them when they come in. BM

Erica Says:

Mine came from “parcel@ups.com” of course the return address was “flowerbedebn5@ExitMove.com”

Naturally I did not open it… even though being a Linux user and not a Windows user probably makes this person’s attempt pointless… but still, can’t be too careful.

John Says:

I am not only getting these from UPS but also from DHL. From: DHL Manager Hazel Snyder [shipping @dhl.com. I have not opened any because they sent me 2 on same day with 2 diferant managers names on them I now have 10 in my spam box all sent from diferant names but the same text.

Michael Peterson Says:

a message came through with the following information this morning.

from:
Support Johnny Sutton(package@ ups.com)

Heading:
UPS Delivery Problem NR 00959

Dear customer!

Unfortunately we were not able to deliver the postal package which was sent on the 2nd of January in time
because the recipient’s address is erroneous.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

It had a 31.0 kb zip file.

All incoming packages of which we are aware has either already arrived, or have been confirmed by e-mail thus far. I wouldn’t open any zip file that comes in this way without the company logo and other details such as my name in the e-mail.

Do not open!!!!!

Michelle Schuchart Says:

Got the below today:

UPS Delivery Problem NR 13484.
Wed, February 17, 2010 11:38:04 AM
From:
Service Manager Nikki Lowery
Add to Contacts
To: msunia@ pacbell.net

UPS_invoice _83134.zip (31KB)
Dear customer!

Unfortunately we failed to deliver your postal package which was sent on the 14th of January in time
because the addressee’s address is erroneous.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

artsy Says:

I got this email today:

From: Service Manager Sung Clark
Subject: UPS Delivery Problem NR 75149.
Attachment: UPS_invoice _83134.zip
Message: Dear customer!

Unfortunately we failed to deliver your postal package which was sent on the 16th of December in time
because the recipient’s address is inexact.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

Dave Brewer Says:

18 Feb:
Received one from Manager Sydney Arnold
service @ups.com
31 KB zip attachment.
In fact a PC timebomb!!!!!

Bill Becker Says:

Thu 2/18/2010 12:23 PM

Manager Laurie Deal [manager@ ups.com]
UPS Delivery Problem NR 16421.
UPS_invoice_933.zip(43KB)
Hello!

Unfortunately we were not able to deliver postal package you have sent on the 23rd of January in time because the recipient’s address is not correct. Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

Witte Says:

Hi,

I’m a driver with UPS Belgium. My sister got an spam email from UPS a little while ago, fortunaly i was there when she got it and warn her not to open it for one simple reason: UPS tracking numbers for electronic labels ALWAYS consist of 16 numbers or letters (letters only being possible in the first 8, the last 8 are always numbers). We have manual labels as well, but there is no email service attached to those. So if you want to verify the mail, just count the trackingnr digits, anything other then 16, spam mail.
Also, if you count 16 digits, you can go to ups.com, and use the track your package service (upper left corner after selecting location) to verify if the nr is correct.
One last note, our labels contain adresses and sometimes phone numbers, not email adressses, so even if ups wanted to warn you by email, we would have to contact the shipper for your email adress…
Long story short, unless you are a regular ups customer (as in shipper) be very carefull with mails from so called ups employers.

Witte Says:

Little note, it’s 18 letters and numbers in 1 tracking number, forgot to count in the first2, which are always the same anyway (1Z…..) Stupid mistake while trying to help you, sorry.

Mandy Says:

i got this one today

UPS Delivery Problem NR 25736.‏
From: UPS Manager Noreen Maddox (delivery@ups.com)
Sent: Wed 2/17/10 10:46 PM
To: thug@ hotmail.co.uk …..THIS ISNT MY EMAIL ADDRESS EITHER
1 attachment
UPS_invoi…zip (30.5 KB)
Hello!

Unfortunately we were not able to deliver postal package you have sent on the 5th of December in time
because the addressee’s address is erroneous.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Maureen Fearnside Says:

Hello

They are still at it - my scam box showed the following:

UPS Manager Cornelius Johnson Add to Contacts
To: mo.arifali@ yahoo.co.uk

UPS_invoice _933.zip (44KB)

——————————————————————————–

Hello!

Unfortunately we were not able to deliver the package sent on the 25th of December in time
because the recipient’s address is incorrect.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

My Kaspersky prevented me from opening the file.

Amanda Says:

UPS Delivery Problem NR 53220.‏
From: Postal Manager Denise Woody (delivery@ ups.com)
Sent: Wed 2/24/10 12:00 PM

Hello! Unfortunately we were not able to deliver postal package sent on the 18th of December in timebecause the recipient’s address is not correct.Please print out the invoice copy attached and collect the package at our department. United Parcel Service of America.

Attachment: UPS Label Zip

Caught in junk main. The zip file is what stopped me.

Eric Says:

Ok, we got a few of these today where I work… all like this:
———————————————————————–
Hello!

Unfortunately we failed to deliver the package which was sent on the 23rd of January in time because the addressee’s address is wrong.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.
———————————————————————–
all have a zip file attachment with the name “UPS_label_Nr(random#).zip” and have this for header information:

From: UPS Support Deena Moreno
X-Mailer: The Bat! (v3.71.01) Home
Reply-To: augustestd47@ seoagentur.org
X-Priority: 3 (Normal)
Message-ID:
To: saaga1950@ arvida.com
Subject: UPS Delivery Problem NR 95925.
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”———-350F307AF69BAD29″
X-Reverse-DNS: as5300-c5.cpc.entelchile.net
Return-Path: augustestd47@ seoagentur.org

it appears as though some joker from a home computer is sending these out their personal “mail server” software from “The Bat!” home edition. And the “reply” address is always different than the “from” address.
Also, ours apparently originated from Mexico according to the IP address 164.77.68.2

Trina Says:

Thank you for your reply “Witte”… as I was reading through these, one thought came to mind: WHY would UPS email someone? They go off of addresses.
I too, received one today:

UPS Delivery Problem NR 33816.
Wed, February 24, 2010 11:40:46 AMFrom: Postal Manager Robin Ash Add to Contacts
To: ____________.net

UPS_label_Nr3734.zip (65KB)

——————————————————————————–

Hello!

Unfortunately we were not able to deliver the package sent on the 3rd of December in time
because the recipient’s address is erroneous.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Pam Laurance Says:

Hello - I just received this and emailed UPS to ask them about it as I was suspicious. Now I see, from your web-site, that I was right to be suspicious. But it is so easy to be convinced that sending that (non-existant it seems) package could have happened in the lead-up to Christmas and been forgotten.

UPS Delivery Problem NR 79645.

Postal Support Dina York
to pam

Hello!
Unfortunately we failed to deliver postal package which was sent on the 17th of December in time
because the recipient’s address is wrong.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Alfonso Says:

I received one today from this address: Postal Support Ian Benavides <parcel@ ups.com with this message:
Hello!

We were not able to deliver your postal package sent on the 23rd of December in time
because the addressee’s address is erroneous.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

I am resident in Italy and this is the first time I got one. I suspected primarily because it was saying hallo!, with no name or reference. Do you know what the virus is supposed to do if opened? The majority of the malware attached are trojans, that when activated, give the spam thieves access to your machine and your personal information. BM

chris k Says:

Thanks, that was helpful!

Grace Says:

Just receive one at my company’s email account from parcel.delivery @ ups.com

It does look legitimate at first becuse it sent from an ups email, but I knew that it is a spam because I’m not responsible for logistic in the company.

Postal Support Glenn Mccoy Says:

Here’s the e-mail I received today. The zip file contains an executable. AVG, Avast, McAffee Anti-Virus, MalwareBytes, SpyBot Search and Destroy, and AdAware did not detect anything malicious in the executable, so you can not count on them to detect the malware.

Thank goodness for Google and this blog!

==========================================

UPS Delivery Problem NR 86757.

Hello!

Unfortunately we were not able to deliver the postal package you have sent on the 14th of December in time
because the recipient’s address is wrong.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Attachement: UPS_invoice_365.zip

Ernest Says:

From: Service Manager Michael Bartley [mailto:help@ ups.com]
Sent: 02 March 2010 23:20
To:
Subject: UPS Delivery Problem NR 08423.

Dear customer!

Unfortunately we were not able to deliver your postal package you have sent on the 27th of January in time because the addressee’s address is not correct.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

chris Says:

I received this one today 3/3/10

Service Manager Kelly Little [service@ ups.com]

Hello!

Unfortunately we failed to deliver the postal package you have sent on the 11th of December in time because the addressee’s address is not correct.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

bx166er Says:

Don’t get fooled by UPS failed delivery scam email. Attached was a zip file. I never downloaded it. Notice how the return-path and from are 2 different emails - big red flag!!

Here’s the details:

Subject: UPS Delivery Problem NR 89194
From: From UPS Manager Aisha Vigil
Return-Path:
X-Originating-IP: [64.202.189.90]
Attachment: UPS_Invoice_715.zip
Message:

Hello!

We failed to deliver the package you have sent on the 16th of December in time because the recipient’s address is wrong. Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

Todd Says:

This was recieved today. Norton 360 labled it as spam

UPS Delivery Problem NR 22262.

Hello!

We failed to deliver postal package you have sent on the 27th of December in time because the recipient’s address is wrong.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

J Roberts Says:

Rec’d this e-mail today supposedly via Facebook. It’s from Postal Mngr Dee Medvano via Facebook. It also states that “delivery could not be made due to erroneous address.” It was headered “Delivery Problem NR15369. Thanks for the warning!

Wendy Clark Says:

I received one today from this address:
UPS Support Eloise Oneil

Sent: Wed, March 3, 2010 4:14:05 AM
Subject: UPS Delivery Problem NR 27201.

Hello!

Unfortunately we failed to deliver the postal package sent on the 19th of December in time because the addressee’s address is wrong.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Attachement: UPS_invoice_715.zip (51KB)

Wendy Says:

I received one today from this address:
UPS Support Eloise Oneil

Sent: Wed, March 3, 2010 4:14:05 AM
Subject: UPS Delivery Problem NR 27201.

Hello!

Unfortunately we failed to deliver the postal package sent on the 19th of December in time because the addressee’s address is wrong.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Attachement: UPS_invoice_715.zip (51KB)

Talia Says:

Hi, received two of these! Do they really think people are silly enough to open them? That was probably a silly question in itself.

First one was on 03/03/2010 from; manager@ ups.com name: Postal Support - Bernado Cantu

Second one today 04/03/2010 from; parcel@ ups.com name: Postal Support - Gloria Bush

Both with the same text as everyone else has received, with an attachment ‘ UPS_invoice 472.zip’ and of course, I didnt open it!

Have UPS been made aware of these scams? Yes Talia, but there is nothing they can do about it. BM
Such buggers!!

Mary Says:

Thanks for letting us know about the scam - this is the version I got today (not to my real email address either). Came with a zip file.

From: “Manager Virgil Sweet”
To:
Sent: Thursday, March 04, 2010 2:12 AM
Subject: UPS Delivery Problem NR 50487.

“inexact address email”

Paul (Sweden) Says:

And I recieved this today March 4th, 2010:
“addressee’s address is wrong”.
from:
Support Trent Craig [delivery@ups.com]
“UPS Delivery Problem NR 154172″
Attachement: UPS_invoice_7734.zip
Sent: 2010-03-04 13:57
Recieved: 2010-03-04 13:59

Dijon Johns Says:

The email I received uses the address help@ups.com. Watch out for this. Since I couldn’t recall shipping a package in January, I was immediately suspicious. Also, if I did ship, I did not have need to provide my email address. I will be notifying our people of this scam.

From: “UPS Support Doug Stringer”
Subject: UPS Delivery Problem NR 73563.

recipient’s address is inexact.

Ernie Stephens Says:

II just received a similar message citing 13th of January as the date that I sent a misaddressed package. I was instructed to print out the attached info and bring it to their office to retrieve the package. Even though the email arrived at my email address it was addressed to wade @hotmail.fr. My antivirus program (Kaspersky) detected the virus and prevented me from opening up the message.

Katherine Says:

Here’s one I got today. The recipient’s address is totally incorrect, as usual.

From: UPS Support Cindy Walsh (delivery @ups.com)
Sent: Thu 3/04/10 3:36AM
To: sdbarbour @msn.com
UPS_invoi…zip

….failed to deliver postal package you have sent on the 23rd of January in time because the addressee’s address is erroneous…..
United Parcel Service of America.

It’s obvious that English is not their first language.

Sara Says:

I got one today from this EMAIL:
Manager Kerry Jenkins (package @ups.com)

….failed to deliver postal package you have sent on the 17th of January in time because the recipient’s address is incorrect………..

Lauren Says:

Hey there, I just got one of these today from “Postal Manager Marylou Stapleton” email help @ups.com

Considering I live and work in Australia, and have never used nor received any mail using UPS, I thought it best to double check, which is how I came to this site. Thanks for the heads up.

Pete Says:

Received 2 emails recently that went straight into my junk file that seemed very fishy:

UPS Delivery Problem NR 77876.‏
From: Manager Horacio Brooks (package @ups.com)
Sent: 04 March 2010 22:05:19
To: the_e_master @hotmail.co.uk
1 attachment
UPS_invoi…zip (35.7 KB)

UPS Delivery Problem NR 26969.‏
From: Support Vilma Chang (help @ups.com)
Sent: 03 March 2010 09:15:53
To: the_footwear_king @hotmail.co.uk
1 attachment
UPS_invoi…zip (50.7 KB)

Now I know they’re a scam they’ll be promptly deleted!! Also been getting a lot of emails from supposed banks, same message but from different banks asking to verify my account details - yeah not gonna fall for that one!

LB Says:

UPS Delivery Problem NR.710098413

Friday, 5 March, 2010 14:37:31
From:
Postal Manager Gerard Hunter

Add
To: …@btinternet.com

UPS_invoice_274.zip (48KB)
My BT email account picked it up as a virus straight away.

sibylle Says:

Same here. received email on my yahoo account:

Von:
“Postal Support Rosario Hickman”

1 Datei (48KB)

* UPS_invoice_528.zipUPS_invoice_528.zip

Virus detected
Datei: UPS_invoice_528.zip

P McIntyre Says:

Ditto. I received mine today, 6 March. Email address given was parcel@ ups.com. Same message: delivery problem. These people should seriously get a life - or at least a different hobby. I promptly contacted fraud@ ups.com and would suggest that anyone who hasn’t should do the same. I disagree about contacting UPS - what are they going to do about it that that they are not already doing? This has been going on for months. I do, however, respect your right to do as you wish. BM

Gordon Scrimgeour Says:

I got the following in my junk mail never seen it before and I did wonder what it was and found it is not new and been around a bit I see.
Don’t know what it does, but do now where I’m puttin’ it so it won’t do it here!

UPS Delivery Problem NR.62805‏
From: UPS Support Terrance Kirkland (parcel @ups.com)

D Chester Says:

I’m in Australia and I received one of these today from:

Service Manager Veronica Rosa

What a bunch of winkers these people are! I’d love to hear about some of them caught by the authorities and dealt with.

Julia Says:

From Manager Allyson Ellison Wed Mar 3 05:30:25 2010
X-Apparently-To: —–@ ymail.com via –.–.–.—; Tue, 02 Mar 2010 21:30:33 -0800
Return-Path:
X-YahooFilteredBulk: 80.48.21.122
X-YMailISG: kqpWHh0WLDvSaj5vi_oy5usHMuyN3Ha59WSsd9iJid3nepbbwq.Qw3712fxu2eOVe2C2×1kyM9t7naZ.OSMsG7xlC6goVMed9xNpT8DvIWIIyF8TQ_TpbelvNGkTArgz0QUt8irB9q.JawE1aIoKU8ZxzmznVhamPHRJwvWycPFxKdF8mdLIQjmdoA2.eAZ1fe8enXysOUmUrF9IaM861dHEQFteG.1hTLdgaYfb1GS0GWT2KhLnfsGvo3oIljH8NTxZArN3DzdUIJIpRZdQZIFjYTFHjOMd6Yc-
-Originating-IP: [80.48.21.122]
Authentication-Results: mta1120.mail.mud.yahoo.com from=; domainkeys=neutral (no sig); from=ups.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO JHISQFGQ) (80.48.21.122) by mta1120.mail.mud.yahoo.com with SMTP; Tue, 02 Mar 2010 21:30:33 -0800
Received: from 80.48.21.122 by mx0.yas-island.com; Wed, 3 Mar 2010 06:30:25 +0100
Date: Wed, 3 Mar 2010 06:30:25 +0100
From: “Manager Allyson Ellison” Add sender to Contacts
X-Mailer: The Bat! (v2.10.03) Personal
Reply-To: vainglorious@ yas-island.com
X-Priority: 3 (Normal)
Message-ID:
To: ooksaribu@ ymail.com
Subject: UPS Delivery Problem NR 67498.
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”———-C1674FF72AC5C1″
Content-Length: 70764
Dear customer!

We were not able to deliver the package which was sent on the 9th of January in time
because the recipient’s address is incorrect.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

added content incase anyone does an google search if this has a file open in an investigative office.

Pip Says:

I too have had 6 emails from different people with the same message. SO it has got to us down under in New Zealand too. The came from a Service Manager Sarah Cochran, a Postal Manager Joanne Hanson, a UPS manager Monique McPherson, UPS Support Bonnie Rosas, UPS Support Latasha Mccord all within 3 days of each other. What eggs!!

Peter Lonsdale Says:

Add UPS Manager Melinda Rogers to your list .

E-mail address package@ ups.com

Fortunately BT, my provider, deleted the virus before sending the rst on to me.

tried the above e-mail address and it does not exist.

Attachment : UPS_invoice_Nr284.zip

Jim Devine Says:

I have received a similar e mail re non delivery of UPS package.
This one supposidly same frpm a Postal Manager Jefferey Driscoll
and uses a delivery problem NR0802044 and refers to Document 876zip .
Thank you for notifying me that it is a scam as it is the second time I have received it. The first one I deleted anyway as I had nothing to do with UPS which is what I have done with this one.

Helen Says:

I get several of these a week, most recent is from Manager Rupert Louis [delivery @ups.com]
and with subject line: UPS Delivery Problem NR 35790.

Deneen Bowen Says:

I received this email today which included a zip file. I have not opened it. The email came from “package@ ups.com” and included two other emails.

TO: david@ parkersautoparts.com
REPLY TO: redrawnv4@ DesignMake.com

….. the recipient’s address is not correct……

Sarah-Louise Howells Says:

I have just received what appears to be a fake UPS mail message wit a .zip file attached. The senders email address is Support Sandy Sparks which actually looks very real, but the body of the mail is similar to that quoted on this site (shown below).
I live in the UK not sure where you are and how fast this is travelling around.

……….. the addressee’s address is incorrect. Please print out the invoice copy attached and collect the package at our department……………..

Dave K Says:

Got mine today

Return-Path:
From: “Manager Kara Dunbar”
To:
Subject: UPS Delivery Problem NR 46087.
Date: Mon, 8 Mar 2010 14:49:04 +1000
attachment filename=”UPS_invoice_Nr355.zip”

Obviously my address was in bcc

Being curious and naive i attempted to open the zip. Avast stopped me immediately.

(Incidentally, having searched, I found that the colin.hazley email address is given at the bottom of the “contact us” page of the Techtics.co.uk website.) Yes they use many real names, including Winston Churchill, Enid Blyton and Johan Wayne! BM

Ken Wangen Says:

From: UPS Support Marcos Buck
To: ME
Subject: UPS Delivery Problem NR 44315.
Date: 10-03-08 07:21:05 AM (Mon, 8 Mar 2010 15:21:05 +0200)
….. the addressee’s address is erroneous…… United Parcel Service of America.
Zip archive attachment (UPS_invoice_Nr414.zip)
………. Well, “Hello!” to U2; Bastards! Now get a real job and leave us alone….. Ha! there I told ‘em.

Valerie H Says:

I’m in Australia and received mine yesterday. Like other comments above, it got through my AVG protection and my service provider’s.

Mine came from Postal Support Eileen Fulton and was addressed to valeriehawkins@ ….com.au which is not my surname.

Dear customer!

Unfortunately we were not able to deliver the package sent on the 4th of January in time because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

Filename: UPS_document_345.zip
Size: 95187
Type: application/zip

The message source info is as follows:

Return-Path:
Received: from sausyp1.lnk.telstra.net (sausyp1.lnk.telstra.net [203.45.45.96]) by mail14.syd…..com.au (8.13.1/8.13.1) with ESMTP id o280ms78005125; Mon, 8 Mar 2010 11:49:00 +1100

Interestingly, when I just clicked on the message source for the second time in order to copy it here, AVG kicked in with a virus threat warning, so it’s good to know that it’s working but disappointing that it has taken 24 hours and a few views of the body of the email for it to alert me.

Thank you for documenting this problem and helping folks like me identify the threat.

Alex Says:

Got one from Manager Krista Goldsmith. Zip file attached.

Subject: UPS delivery Problem NR 96204

to field: adam@ econoappliance.com (?)

….. the recipient’s address is erroneous….. United Parcel Service of America

Mark O'Connor Says:

NOD32 AV4 does its job.. :) i have being recieving these @usa-ups.com and @ups.com for the past several months now. This morning i recieved 14 emails in the same minutes as below.
SO GOD DAM ANNOING…. have added subject rule now to outlook web access before polling for my catch all - hopefully this will work

09/03/2010 11:01:10 POP3 filter email message from: “Support Williams Kinney” to: with subject UPS Delivery Problem NR 90921. dated Mon, 1 Mar 2010 22:00:46 +0000 probably a variant of Win32/Statik potentially unwanted application contained infected files NT AUTHORITY\SYSTEM Threat was detected upon receiving email by the application: C:\vpop3\vpop3.exe.

Timmy sampson Says:

I have recieved two of these in the last three days, Both from diffirent names but both ending in parcel @ups.com. Considering the fact that I have not sent anything through ups in over 2 years, I would have opened the attachment if I had used ups. And also the address that it was sent to was not mine both times.

TANYA Says:

I GOT TWO SENT TO MY SPAM WITH THESE AS THE SENDERS:

UPS Support Janis Tomlinson (parcel.delivery@ ups.com) Manager

Mario Bledsoe (support@ ups.com)

Eric Says:

Mine is from Martha Hooker

KENT Says:

My email was from Belinda Pina - package @ups.com.
They wanted me to pay US$29 to open a zip file to get a copy
of an invoice so that I could go and pick up my parcel.
What’s the point when I live in Australia. I do not know anyone in USA
so no one would send me a parcel.

Edmonton Eddie Says:

Received this one today with the attachment: “UPS_invoice_234.zip” I didn’t even bother opening the email - just previewed and deleted.

Claire Says:

I’ve had two, the last one came from Noel Sherman the attachment is a .zip

Bartman Says:

I got mine today, March 16, 2010. It was from Postal Support Darwin Whitlock; standard text and this is the name of the attachment: UPS_invoice_234.zip

Brian Says:

I got one today:

From UPS Support Lucinda Callahan (parcel @ ups . com)
To: Adam_Weedon14@ hotmail.co.uk (this isn’t even mine!)

Luckily I have Defender, so if I opened it it would have been caught (hopefully), but Live wouldn’t even open the attachment, saying it detected an unknown virus. I wonder if it’s actually a new virus or just hidden?

jb Says:

I gt one today in the morning. From: “Manager Charlie Marcum” To: ludwig.r@ att.net (not my e-mail)

doc.62 Says:

i got one 3-15-10 at 11:11 pm from Postal Manager Laverne Conley(deliver @ups.com) and i did not know about this scam. i opened the e-mail but my vires blocker would not allow for the mail to come through, my system popped up a screen that said “do not open vires found in mail” I use AVAST ANTIVIRUS

Rita Sclavunos Says:

This is what I received from earthlink:

Virus Detected: CMU-11078-20100315

Message Details:
From: “Postal Manager Dick Spears”
Subject: UPS Delivery Problem NR.6629264
Date: Mon, 15 Mar 2010 23:24:14 -0800

Amen Says:

Service Manager Wesley Lovett (parcel.delivery@ ups.com)
Got one from this email. didnt open it. but i googled about it.
thanks for the heads up.

oap dave Says:

Mine was from ; Support Faustino Queen<support @ups.com.
No logo on email and I emailed back straightaway asking further details without opening attachment.
No reply after 36 hours sent reminder and then got response from
postmaster @ups.com telling me the recipients email address could not be found in the recipients email system!!!!
Also have had a similar email with attachment from Facebook Service <support@facebook.com which is very similar and purports to send an attachment with a new password to be opened. No logos of course !!!!!!!!!!!!
Good luck .

oap dave Says:

Mine was from ; Support Faustino Queen<support @ups.com.
No logo on email and I emailed back straightaway asking further details without opening attachment.
No reply after 36 hours sent reminder and then got response from
postmaster@ups.com telling me the recipients email address could not be found in the recipients email system!!!!
Also have had a similar email with attachment from Facebook Service <support@facebook.com which is very similar and purports to send an attachment with a new password to be opened. No logos of course !!!!!!!!!!!!
Good luck .

Jun Says:

Mine was from a: Postal Support Adolfo Mcdonough

…….because the recipient’s address is erroneous.
The only clue to this being a scam was that they got my email TOTALLY wrong. ^o)

Kate Says:

They are still going, and seem to be refining their work;

From: UPS Manager Jacques Rossi
Subject: UPS Delivery Problem NR 15242.

Date: Wednesday, 31 March, 2010, 2:01

Hello!

We failed to deliver the package which was sent on the 3rd of January in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

No logo’s tho and my name was not quite right in the ‘to’ field. Did not open the attachment.

First scan of document (before I open it) said it was clean….but I think that is wrong. Not going to try.

It was interesting as we did get a parcel late in January this year as a gift (from UPS) so you don’t know if someone has tried to send you something or not. And having an email coming from what looks like a UPS address is a concern. Hope they get stopped soon.

Paul B Says:

I got an email today with the same “not able to deliver” angle as most of you on here. Mine had a zip file attached which I didn’t open.

Support Debra Easley [parcel @ups.com]

lisa Says:

Got one today from manager@ ups.com with the subject “UPS Delivery Problem NR 42895″, I’ve had some contact with UPS lately and I got confused so I opened the email and read the same text as described here (like ak470125).

It was from Support Hazel Hedrick” and the attached file was named “UPS_invoice_7845.zip”, I klicked on it but at the second question/warning (which I get all the time) I felt something was wrong and stopped. Can it has done something to my computer anyway? I’m a bit worried…what should I do?

My spam-filter usually works quite well but apparently missed this (I have mail.com), so it’s great that this site exists to warn everyone.

misa Says:

Just got this one today. I’m wary of opening any attachment from any unknown sender so I always look at email address domain to weed out potential scammers but this one was from help@ups.com so it’s somewhat convincing. I don’t recall shipping a package via UPS in January but I do ship things for my job so it’s always possible. I googled the email address and found this page. Since the inside message was almost identical, I feel certain that this email is like the others. There’s a zip file attached (which I didn’t open). Here’s what the letter said:
From: Postal Manager Elmo Cruz [mailto:help@ ups.com]
Sent: Thursday, April 01, 2010 2:00 AM
Subject: UPS Delivery Problem NR.6267260
…… because the addressee’s address is erroneous.

United Parcel Service of America.

Holly Says:

Found this in my junkbox … curious so I opened it, it looked fishy so I thought I’d google it before I’d consider opening the zipped attachment
The “to” address isn’t my address either

From: UPS Support Augustine Moser (package@ ups.com)

To: awmelgar@ msn.com
…………… the recipient’s address is erroneous.

Sophie Says:

I got one today and unfortunately opened it, because I am expecting a package from UPS! Nothing has happened for several hours, so I am hoping that my virus protection got it…

here is the e-mail:

From: package@ ups.com
Subject: UPS Delivery Problem NR 86288.
Date: April 1, 2010 6:24:33 AM PDT
To: sierramistox@ aim.com

……….. the recipient’s address is not correct.

Summer Says:

Received on this morning:

UPS Delivery Problem NR 68280.

Hello!

Unfortunately we failed to deliver the package which was sent on the 1st of January in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

—-

Attachment: UPS_Invoice_4794.zip

It appears to be from: Support Dominique Beatty

But in the return path is: Return-path:

Damian Says:

Received several days ago. Support Gina Whitlock [help @ups.com] UPS Delivery Problem NR 37497. ……….. the recipient’s address is inexact.

kah Says:

Mine had a subject “UPS Deliver Problem NR 85576″ and was from Dora Huggins (parcel.delivery@ ups.com) The attached zip file was named: UPS_invoice_2794.zip

Mark Says:

Mine was subject line: UPS Delivery Problem NR.9827193‏ FROM: Service Manager Vicente Gorman (parcel@ ups.com). Kind of funny, the dude didn’t even bother to send individual e-mails, so it’s someone else’s e-mail address that shows up first, and I’m later on the mass e-mail. I can’t believe people actually make money as con artists when they’re that lazy. Sending out a million of these a day means they can be as lazy as they like. They only have to find a few people waiting for UPS packages that don’t read the emails properly and bam! - they have access to their bank accounts, credit cards, or any other info stored on their machines - and they are very successful in finding them! BM

Jacq Says:

Mine had: Subject: UPS Delivery Problem NR 00632.
and: From: “Manager Whitney Tompkins” . It was sent 3 April 2010, at 12.44 am

I run all my email through MailWasher Pro, before downloading ANY of it from my provider. Mailwasher allows me a look at the raw source of any email I get and is any easy way to spot the dodgy and the dubious.

Here is the raw source header of the one I got, in the hopes that it may help you to put the boot into these annoying morons. Notice that the “To” field doesn’t even match my actual email address!

Ciao, Jacq.

Return-Path:
Received: by cpms02.int.iprimus.net.au (8.0.025.1)
id 4B8404700130B796; Sat, 3 Apr 2010 01:15:04 +1100
Received: from mx04.syd.iprimus.net.au (210.50.76.228) by mx04spool.syd.iprimus.net.au (8.0.025.1)
id 4B7E2E67016E3FEE; Sat, 3 Apr 2010 01:15:04 +1100
Received: from host164-170-static.240-95-b.business.telecomitalia.it (HELO homegate) ([95.240.170.164])
by mx04.syd.iprimus.net.au with ESMTP; 03 Apr 2010 01:14:43 +1100
Received: from 95.240.170.164 by smtp.secureserver.net; Fri, 2 Apr 2010 16:14:38 +0100
Message-ID:
From: “Manager Whitney Tompkins”
To:
Subject: UPS Delivery Problem NR 00632.
Date: Fri, 2 Apr 2010 16:14:38 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=”—-=_NextPart_000_0006_01CAD26E.D41E1FE0″
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 4.72.3155.0
X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3155.0

This is a multi-part message in MIME format.

——=_NextPart_000_0006_01CAD26E.D41E1FE0
Content-Type: text/plain;
charset=”Windows-1252″
Content-Transfer-Encoding: 7bit

Dear customer!

Unfortunately we failed to deliver the postal package sent on the 22nd of January in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

——=_NextPart_000_0006_01CAD26E.D41E1FE0
Content-Type: application/zip;
name=”UPS_invoice_6794.zip”
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename=”UPS_invoice_6794.zip”

Heather Jack Says:

I have just received what, from checking your site, must be a scam too. Message title was “UPS Delivery Problem NR.1360375″ sent by Postal Support Jed Butcher [help@ ups.com] with a zipped .exe to open. I will now delete it!

Oliver John Martin Says:

Here is the scam I received today:

From: “Postal Manager Leona Negron”
inflateapbw @friendtrain.com
help @ups.com

…………… the addressee’s address is inexact.

Treborn Dun Says:

Headers in the scam email I received:

From: Service Manager Earnest Fields

Reply to header: highjackedlyj76 @autobahn.me

Xmailer header: The Bat! (v3.60.07) Professional

Subject: DHL Office. Get your parcel NR.2366594

Ann Lockwood Says:

Hi
Received today, in my mail but addressed to ‘annellison @tiscali.co.uk’. From: Postal Manager Rosalind Boggs [delivery @ups.com
‘Ups Delivery Problem NR8876739
Ups_invoice_98237.zip (47KB)
……. the addressee’s address is inexact.

Doug Says:

I just got one- from Manager Jerome Brantley service @ups.com

Alfonso Says:

I just received this message with a zip attachment which I deleted at once . I note that the mail indicated as recipient is not mine account, nor the one where I received the scam.

Ven 16 aprile 2010, 07:27:47
UPS Delivery Problem NR 62971.
Da:
UPS Support Bill Wynn
Aggiungi alla Rubrica
A: alfista900 @yahoo.it

UPS_document_69337.zip (50KB)
………. the addressee’s address is inexact.

Karen Says:

I got one from package @ups.com

darren Says:

I got this 1

UPS Manager Etta Helms (manager @ups.com)

Gary Says:

just recieved it too (in my spam folder ooh er!) . Adressed to someone with a slimilar name to mine @btinternet.com but the strange thing is that I have quite a different email address!

mail reads:
Dear customer!
We failed to deliver postal package sent on the 18th of January in time
because the recipient’s address is incorrect.
Please print out the invoice copy attached and collect the package at our department.
United Parcel Service of America.

file attached is:
UPS_invoice_25578.zip (44KB)

comes from:
Service Manager Rosanne Henry

Deborah Says:

Here’s what I received today:

From: “UPS Manager Adrian Jarvis”

contains attachments1 File (44KB)UPS_invoice_3279.zip

Dear customer!

Unfortunately we failed to deliver the package sent on the 9th of February in time because the recipient’s address is inexact.
Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

Joe Says:

I just received from “UPS Support Lynn Vance”
Subject : UPS Delivery Problem NR 22335.
Attachment : UPS_invoice_2557.zip

PJ Says:

UPS Delivery Problem NR.4213657Wednesday, April 21, 2010 5:28AM
From: “Service Manager Madeline Sexton” Add sender to ContactsTo: pjhickman @sbcglobal.net Message contains attachments1 File (44KB)UPS_invoice_5279.zipDear customer!

……….the recipient’s address is wrong.

kit dar Says:

UPS Delivery Problem NR 29506.Monday, April 19, 2010 10:18 PMFrom: “UPS Manager Eugenia Alford”

I have received from this person. Just posting for others to see who is also scamming. Thanks

Diann Says:

Rec’d same typs of message from
DHL Support Shelia Montes” <parcel @dhl-usa.com
DHL Tracking NR 79584719.

Cori Says:

Manager Kari Mcmillan [package @ups.com]
Subject: UPS Delivery Problem NR 51691.
Attachment: UPS_Document_1357.zip (48 KB)

Hello!
Unfortunately we failed to deliver your postal package sent on the 21st of March in time because the addressee’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.
DHL Express Services.

Picture Perfect Studios Says:

My spamware has blocked two of these in the past two days, but mine are coming from parcel @ups.com, so dont be fooled by the address that they are coming from now!

C. Price Says:

ON 4-23-10 Noon
Received a UPS email which is the same as the others
from Aaron Calloway
manage r @UPS.com
DHL International Services

kai Says:

mine sounds like it’s legitimate but my Antivirus said it was a Trojan. It came with the name Aimee Galloway <parcel.delivery @ups.com

Hanan Says:

Hi, Just received one as well:
parcel.delivery@ups.com
UPS Delivery Problem NR.9338518‏
From: Service Manager Daniel Correa

came through my Junk in hotmail

Dear customer! We were not able to deliver the postal package you have sent on the 2nd of February in timebecause the recipient’s address is incorrect.Please print out the invoice copy attached and collect the package at our department. United Parcel Service of America.

Theunis Says:

Postal Support Jimmie Walden (package @ups.com
I got the same thay only say hello

Gennadi Says:

I received this e-mail today. Noted that it does not have my correct e-mail address. Scanned the attchment before opening. Do not open the attachment. It is an .exe file full of worms and trijans. Here is the copy of the e-mail I received:

Full ViewUPS Delivery Problem NR.3866733
From: Manager Virgil Osborne Add to Contacts
To: getsaved @greatshepherdcc.com
Attachment: UPS_postal_document_997.zip (27KB)
——————————————————————————–
Hello!
Unfortunately we failed to deliver your postal package which was sent on the 4th of February in time
because the recipient’s address is erroneous.
Please print out the invoice copy attached and collect the package at our office.
United Parcel Service of America.

michelle rodriguez Says:

i received one from
from: “Manager Rhea Mason” Añadir remitente a
to: masaenzmas @yahoo.com.mx

A. Boyd Says:

I kept on getting these and ignored them. Finaly I decided it may be material from a site my wife has visited. I downloaded the attatchment. My security ( Macafee) reported no virus risk. The result was a rogue security on my computer a Trojan, called Vista home security or something like that aand their logo(a windows shield) appeared on the bottom right on my desktop. I tried to go into my uninstall it didn’t appear on the list. I tred to change the start up programmes on my control panel, every time I did this I was blocked by it.I shut down my computer after scanning with Macafee.When I started up again I got a blue screen on my desktop. I started my computer again in safe mode and when I got on my desktop Macafee had identified the problem after rescanning activating system restore to the previous day’s date the problem was gone.
The point of thje rogue security was that it was telling you that your computer is infected and had to pay them to fix it.
I can’t believe I got caught with this because I always warn people against such things.

I don’t know if it is my failing eyesight but I find the pale coloured text difficult to read. Thank you Alex Boyd

Paul Sutton Says:

Heres mine below. no1rabbit is not even my email address even though its fairly similar so why is msn letting it get into my junk folder. also my dad had one similar a few months ago. they are using ups in the email address now but it was the no1rabbit for my email that made it look more suspicious.

UPS Delivery Problem NR 99828.‏
From: UPS Manager Leonard Castle (parce l@ups.com)
You may not know this sender.Mark as safe|Mark as junk
Sent: 29 April 2010 18:30:06
To: no1rabbit @msn.com
1 attachment
UPS_invoi…zip (56.0 KB)

Vic Says:

I received one of these mails 3 days ago here’s the name and address they sent it from:

- Manager Avery Savage -

J. Quest Says:

UPS Delivery Problem NR.5682686‏
From: UPS Manager Shannon Lange (service @ups.com)
Sent: Tue 4/27/10 5:57 AM
To: jason1175@msn.com
Attachments: 1 attachment
UPS_posta…zip (26.3 KB)
…………the addressee’s address is wrong.
Note that the ‘To:jason1175@msn.com” is NOT my email address yet this email somehow showed up in my box

BB Says:

got this today:

UPS Delivery Problem NR.6131301

Postal Manager Tim Ogden [package @ups.com]

…. the addressee’s address is inexact.

Attachment: UPS_invoice_2978.zip(28k)

Unzipped: UPS_invoice_2978.exe

I didnt run the exe, but invoices dont come as an executable file!

Jim Ferguson Says:

Hi, I received one of these email today from the supposidly UPS stating the following:

This was sent from someone calling themselves Coleen Moon

Hello!

Unfortunately we failed to deliver the postal package sent on the 16th of February in time because the recipient’s address is wrong.
Please print out the invoice copy attached and collect the package at our department.

DHL Customer Services.

The attachment was UPS_invoice_4978.exe

DO NOT OPEN IT…I nearly did until I view the security warning on my screen.

Bruce Says:

I also had the same thing happen, in fact I’ve had a couple of these lately and both times I deleted them, this time I decided to google it and found you posting, I had a different name as follows: Support Julianne Hayden [delivery @ups.com]

D Says:

UPS Delivery Problem NR.3250180‏
From: Manager Kristen Odonnell (delivery @ups.com)
Sent: 05 May 2010 11:43:52
To: emilymarshall1 @hotmail.co.uk
1 attachment
UPS_invoi…zip (27.6 KB)

If you’re having problems downloading attachments, please sign in again and select “Remember me on this computer”.
Sign in again

Dear customer! Unfortunately we failed to deliver postal package which was sent on the 17th of February in timebecause the recipient’s address is inexact.Please print out the invoice copy attached and collect the package at our department. United Parcel Service of America.

What a load of rubbish!!!

vicki jones Says:

I received this a few weeks ago and I opend it, what should I do?? cant find a file or nothing on my laptop? where would it be?? received another off them today too, thank you. Check out my previous replies to the comments above to others that have asked the same , or similar, question. BM

viraat harsh Says:

mine came from
Manager Joshua Rosario

Chris Says:

I received one from:
Postal Manager Hattie Wade
help @ups.com

Did a quick google search and found this page, obviously a scam.

Steven D. Says:

Call me paranoid but these days, I Google every unknown address and sure enough what comes up…..SCAM. I got one from this LOSER. Janie Muller (parcel.delivery @ups.com)

Jerry M. Says:

Here is another one - MY email is not jerry_ryan:
UPS Delivery Problem NR 48971.‏
From: UPS Support Maureen Campos (support @ups.com)
Sent: Tue 5/04/10 4:13 PM
To: jerry_ryan @q.com
1 attachment
UPS_invoi…zip (27.6 KB)
—————————————————————

I did as UPS site says:

If you receive a fraudulent or suspicious e-mail that claims to be from UPS, do not respond or open any attachments or links associated with the e-mail. Please forward the e-mail to fraud@ups.com before deleting. Because our systems work to protect the UPS network by blocking content that may pose a security risk, we recommend you either copy and paste the header and message into a new e-mail or scan the e-mail and send it as a PDF attachment to ensure it is received by fraud@ups.com.

MIchelle Says:

I got one too:

UPS Delivery Problem NR.0946784‏
From: Support Ken Valle (parcel.delivery @ups.com)
You may not know this sender.Mark as safe|Mark as junk
Sent: Wed 5/05/10 11:46 AM
To: fireyangel43 @msn.com
1 attachment
UPS_invoi…zip (27.6 KB)

Hello! We were not able to deliver the package you have sent on the 28th of January in timebecause the addressee’s address is inexact.Please print out the invoice copy attached and collect the package at our department. United Parcel Service of America.

simon Says:

From: Postal Manager Brooke Stafford
Subject: UPS Delivery Problem NR 72334.
Part(s): 2 UPS_invoice_Nr1277.zip [application/zip] 67 KB Download Download All Attachments (in .zip file) Download All Attachments (in .zip file)

If it is not displayed correctly, click here to open it in a new window.
Hello!
We were not able to deliver the package you have sent on the 23rd of February in time
because the recipient’s address is wrong.
Please print out the invoice copy attached and collect the package at our office.

DHL Customer Services.

joan Says:

UPS Delivery Problem NR 70912.
“Support Mariano Myers”

To:marouf_dwaikat @yahoo.fr

* UPS_invoice_Nr4277.zipUPS_invoice_Nr4277.zip

………. addressee’s address is erroneous….

Pepperd del Prado Says:

This is the spam I always get every day from this scammer.
“UPS Support Angel Phipps [service @ups.com]
UPS Delivery Problem NR 98509.
Hello!
We failed to deliver postal package which was sent on the 26th of February in time because the addressee’s address is incorrect.
Please print out the invoice copy attached and collect the package at our department.

DHL Services.”
The sender was so careless mentioning DHL Services, when the email address was UPS - doh! Where to hang these scammers!

The Welly Says:

We recieved the addressee’s address is erroneous. UPS International from Postal Support Sarah Mcneal [delivery @ups.com].

Marva Lashjly Says:

Today I received one from UPS as well telling me the same thing. It came from Silver Enny badsanne @ups.com and the # is NR2810194 It is a good thing that I decided to check before opening it because I was ordering lots of things. It is always good to check the date that they said you ordered because I did not order anything on that date.
Hello!
We were not able to deliver the postal you have sent on the 3rd of April in time because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.
UPS International

jade Says:

I need some help!

I got this same email, thought it was spam, and opened the file by mistake 2 weeks later!
I have a mac and NO virsu protection, ad now I am scared!

PLease, what should i do???

These are the files that I downloaded, but have since deleted them…. is it too late? I am sorry if I seem like an idiot, I am only new to mac and was assured I didn’t need protection! Now I’ve done some reasearch adn realise what a fool I am!!

Any suggestions for programs?!?! And what I should do now??

Kindest Regards,
Jade

UPS_invoice_4978-1.exe
UPS_invoice_4978.exe
UPS_invoice_4978.zip
UPS_invoice_4978.zip 12-42-54-892.zip

Sorry, but I have never owned an expensive drawing machine a mac, but Mac’s van get viruses the same as real computers PCs. Excuse my flippancy Jade, I have no experience of virus software for Macs, but you could try http://www.clamxav.com/ or http://www.iantivirus.com/. If anyone else reading this owns a Mac, and they can help Jade with her issue, please leave a comment. BM

David Ricks Says:

Just received the same e-mail from “”UPS Support, Woodrow Gurtner” “. The attached file was invoice0753098.zip (77k bytes) .

JON Says:

Another name for the list :

From: “UPS Manager, Michel Siedner”

From a UPS address too !!!!!!!!!!!!!!!!!!!!!!!!

Rach Says:

Email received 27 April 2010, not flagged as spam
I am in Australia
The “To” email address is not mine

From: Postal Manager Nathan Daugherty
To: short_scary14 @yahoo.com
Att: 353057926.txt (1KB)

Hello!

We failed to deliver the package which was sent on the 6th of March in time because the recipient’s address is wrong.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

Paul Says:

Just got what appears to be the same email.

From: UPS Support, Manuel Nails <jjlvr @ups.com
Subject: [Bulk] Delivery Problem NR2490663.
Date: June 21, 2010 6:14:18 PM PDT

Attachment: invoice_N9880006.zip

Dear customer!

We failed to deliver the package which was sent on the 28th of April in time because the recipient’s address is wrong.
Please print out the invoice copy attached and collect the package at our office.

UPS International.

I deleted it and marked it as spam.

Jo Malone Says:

Got mine today from

UPS Manager, Angus Stoelting [sgmyt @ups.com]

It contained a similar message to the others, deleted it, but annoyed that it didn’t go to junk email.

STUART Says:

My emails always come with a name @ ups.com

Annie Says:

Now they are using jpegs.
I received an email from: “UPS Support, Luke Grist”
The subject:UPS INVOICE NR2553704
The attachment is 4393679.jpeg

tomy Says:

hi ive recived quite afew from them but never opened them the lst nsme was wyndham Pavy @ups.com my comp identified it as a trojan,,so Dont Print The Reciept,,good luck!

lei Says:

i received 2 of these…
but the thing is i had actually sent 2 packages so i called ups to tell them they sent me a virus so i have no way of opening it ..the guy was like sorry but we dont have packages here..i was freaking out the whole time..then i just thought hmmm let me google this and this came up..such a relief to know it was a scam and my laptop detected it..oooh and both the recipients emails on these are not my email!!!!

UPS Invoice #9173312887Lundi 21 juin 2010 15h42
from: “United Postal Service” Ajouter to: laetycia02 @yahoo.frMail avec pièce jointe1 fichier (29 ko)UPS_Invoice_12.06.2010.zip

Dear Sirs,

We were not able to deliver postal package you sent on the 19nd June in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.

Personal manager: Frieda Lehman,

UPS Tracking #9531164276Jeudi 27 mai 2010 19h46
from: “Your UPS” Ajouter
to: laf3a @yahoo.fr Mail avec pièce jointe1 fichier (30 ko)UPS_LABEL_Nr.SDO_9932-24522111.zip
Dear Customers,

We were not able to deliver postal package you sent on the 12nd May in time
because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.

Your personal manager: Penelope Rosario,
Customer Service: 1-800-CALL-UPS
Fax: 888-197-1046
Your UPS

Ann Says:

All right, I am an idiot.

Although I am usually great at spotting scams, I feel for this one. Even tried to download the file (several times…)

As a mac user, what should I do now?

– reformed idot As a Mac User, you should throw it in the bin and buy a PC :) Seriously though, stick a virus and trojan checking program on your machine and take out any offending malware. BM Check this out

Gerri Says:

Received 6/21/10:

Subject: Deliver Problem NR6238334.
Message (Attachment invoice_N1832745.zip - containing an .exe)

Body:
UPS Official looking “Letterhead”

Dear customer!
We failed to deliver postal sent on the 28t of April in time because the recipient’s address is wrong. Please print out the invoice copy attached and collect the package at our department.
UPS International.

Like I said, the attached “Invoice” is an exe!

(this too was made to look as if it was from a ups.com email address - anyone can mask an email address to look like it’s from anywhere)

~~~~~~~~It goes without saying, DELETE, delete, delete!!!~~~~~~~~

Take care all!

Frank Says:

Hi UPS

I sent 32 cartons to USA,but my customer only receive 31cartons? where is my carton? tracking H872 **** *** for your reference!!!

Hope to hear from you soon!

Best Regards
Frank, do you think that I am UPS? Read the article! BM

Frank Says:

PLs send your reply to my email address directly. it is quite urgent.you are broking my business with our customer!!! You are just not getting this are you Frank. I say again, read the article - WE ARE NOT UPS. BM

Leave a Reply





SEO Blog

SEO Blog

The Big Man's SEO blog is primarily aimed at website owners looking for ethical SEO tips, optimisation advice and who are interested in reading articles and opinions related to search engines, the internet, technology and software.