Be on your guard! Scam e-mails are being sent in the name of Smartpost

November, 03.11.2023

Every day, tens of thousands of people in Estonia receive notifications of packages awaiting collection – and scammers looking for new ways to make money are turning this to their advantage.

Yesterday evening (1 November 2023), e-mails started coming in to our customer service from concerned clients who had received suspicious e-mails ostensibly from Smartpost. These e-mails are a scam, and under no circumstances should you follow the instructions given in them: do not update your contact details or make any transactions. You should be especially cautious in this case because the e-mails and the websites to which they link tend to be very similar in appearance to the real ones.

How can you recognise a scam e-mail?

The sender’s e-mail address is suspicious. The most recent scam e-mails have been sent from such addresses as support@mail.hexi.ladesk.com, Smartpost-ee-3022@runlikecrazy.com, Smartpost-ee-5230@runlikecrazy.com and itella@galbebrody.freshdesk.com. Genuine Smartpost e-mails are always sent from addresses which end in @itella.com or @smartpost.ee.
The e-mails do not look quite right, e.g. they use the wrong logo.
They feature typos and strange use of language, e.g. please refresh your information / Note: If you don’t pay in the next 24 hours, your package will be returned to sender. / Your package has been prepared for delivery.
Before clicking on any link, make sure you are being redirected to an actual Smartpost-related website. For example, over the last couple of days we have seen such URLs as sendfmedo.goldencloud.com.sa, sequre-web.cisco.com and xgtuatroyh.com.sa.

The only websites you should trust in these cases are www.itella.ee, www.smartpost.ee and my.smartpost.ee. Payments are only made on the self-service site my.smartpost.ee. Packages have to be paid for upon sending, ordering or receiving. We never request card details by text message or e-mail. We never ask clients to pay to update the details of a shipment.

Wrong	Right
support@mail.hexi.ladesk.com, Smartpost-ee-3022@runlikecrazy.com, Smartpost-ee-5230@runlikecrazy.com and itella@galbebrody.freshdesk.com	Ending in @itella.com or @smartpost.ee
sendfmedo.goldencloud.com.sa, sequre-web.cisco.com, xgtuatroyh.com.sa	itella.ee, smartpost.ee and my.smartpost.ee

Wrong logo:

If you have any doubts, do not submit any personal data and do not make any payments. If you have received a suspicious notification in the name of Smartpost, contact our customer support (by e-mailing info@smartpost.ee or calling +372 60 11 000) to determine whether the link is genuine and safe to click on. If you have clicked on a scammer’s link and entered your bank card details, contact your bank immediately to have your card closed. And if you have fallen victim to a scam, report it to the police.

Examples of recent scam e-mails

Version 1: