Saturday 25 July 2009

Mysterious 07755 International Calling

Today I received an interesting postal spam - it's not one I've seen before and am still a little puzzled to figure out what the angle is with this one - if indeed there is one, here are the case notes:
  • A postal letter is sent to me recorded delivery - I have to sign for it.
  • The cost of the letter is £1.14
  • The postage label has been printed out by the online royal mail service.
  • My address, is curiously an address I use for a single paypal account.
  • Inside the envelope is a flyer for cheap international calls using the 07755 service - you see these all over the place - there are all sorts of similar websites such as cherry call, planet numbers and this one: 999calls.com

So where is the scam?

I have just chuckled into a whisky because I love this one. I have not totally confirmed it, but I am postulating that it is an old fashioned postage scam. I took the royal mail signed for receipt code and typed it into the track and trace facility and basically, this has come up with a duplicate signee (i.e. not me) Interestingly, the signature is for someone in Enfield, next to a local post office and the 999calls.com whois address is in E1 London (so, much closer than Scotland.) The interesting part for me is the value that UK citizens place on a postal letter that has been hand delivered and has to be signed for. We automatically filter messages sent to us using cheap mechanisms - we don't believe emails in our email inboxes anymore - we are beginning to see spam texts. The general priciple has always been that a cheap delivery mechanism usually incites fraud and spam. This one is different - it tries to look expensive.
  • I am still working on it, but I think the royal mail postage online service has also been hacked to produce forged address labels!
  • The peel off "recorded" Signed For labels have been reproduced - but not with unique numbers.
  • Also, one of my paypal addresses has been used for this so no doubt that has been stolen from somewhere.
I had to actually sign for this bit of spam from a smiling postman - imagine a phishing scam using this trusted delivery methodology?