Observed domain or link
- f006[.]backblazeb2[.]com
- buffalo[.]co[.]za
What to do
- Close the page. Do not enter your ID, passport number, phone number, card details, or CVV.
- Do not pay a delivery fee through a link from an unexpected message.
- Open the courier's official app or type its known website address yourself to check the shipment.
- If you entered card details, contact your bank immediately and ask about blocking or replacing the card.
- If you entered an ID or passport number, be alert for identity-theft follow-up messages and contact the relevant authority or fraud service for advice.
- Report the message or page through the service where you received it, then delete it.
What this alert does not establish
- The downloaded page shows how submitted data is sent to a Telegram bot, but it does not establish who controls that bot or how many people submitted information.
Share this warning
This alert is also on WatchOut, our shareable alert feed, with one-tap sharing and free email alerts.