Just got a message from evri, about a delivery, when I've not bought anything .

[lucy_farmer]

Hello Folks, 

I just got an email from Evri about a delay to 'my Simple Delivery parcel from Ebay'.  But I haven't bought anything off ebay for several months.....

It's addressing me by my full, proper name and there's nothing 'under' the senders name- Evri- when you hover over it, and there's a tracking number.

I'm still worried about clicking on it though!

I went to the evri tracking site and put in the associated tracking number, and was told ' not working , try again later'.

Has anybody else had any mystery Evri emails? Did anybody else click on one?

[superchallenge]

It's almost certainly a phishing attempt. Don't click anything other than "Delete."

[landjlynn]

Personally, if I received an email for something I definitely am not expecting then I would ignore it.  Especially as Evri system doesn't seem to recognise the tracking number.  A little worrying they know your name, although these days there are a lot of ways that could leak out to the wrong sort of person.

[lucy_farmer]

That was my first thought, but it's the best/most official looking  'phish' I've ever seen !

I'll get rid of it....

[department28]

Are you expecting anything from RM that could be being sent by Evri instead? Someone recently mentioned getting an RM parcel delivered by Evri. Who knows what's going on with Evri & RM these days?!

[gnosemalf]

You could copy the link URL and paste it into a text editor and inspect the address, especially the domain. Scammers usually use subdomains or text in the address to make them look authentic.

I wouldn't advise anybody to do this unless they are comfortable with it but I paste the link into a browser address bar and delete everything that appears after the domain to see if there is any kind of legitimate website at the top level. Or sometimes delete everything after any '?' that appears in the address or and random looking text which will validate the e-mail address (or phone number) to the scammer. Unfortunately, scammers are very quick to leap onto new trends which people may not be comfortable or familiar with in order to exploit them.

[*maetrix*]

My email is now getting completely clogged up with Simple Delivery updates..we've received your order/your order is being packed/your order is at our hub/we'll let you know when your order is out for delivery/your order is out for delivery/your order has been delivered etc etc etc 🙄

We seemed to manage ok for years without all this fuss.

[edwardian-dreams]

What about selling? And they’ve sent the updates to you as well as buyer?

if you’ve neither  bought or sold then just report junk and delete 

[lucy_farmer]

Well.... I've just got another Evri email telling me my (non-existant) parcel is now on it's way to the local depot and they'll send me an estimated delivery time within 48hours.....   They're persistent , I'll give 'em that!

(I've binned that one as well )

[therenewalworkshopltd]

Don't just bin them, block them.

Do check the source email first though.

All you need to do, is to hover the mouse of the address and it will show you.
It's fairly easy to see if this kind of thing is actually valid doing that, in most cases anyway.

[edwardian-dreams]

This is also handy 

https://www.evri.com/cyber-security

[lucy_farmer]

Nothing shows up under the originating address, which just says 'Evri'.

But there is a ream of stuff that pops up under the 'track and divert parcel' button. In amongst this 'stuff' (you know... a load of mixed characters, numbers and symbols) is my actual postcode.

I'm still not clicking on anything!

[lucy_farmer]

Thanks ed  !

[xyz307xyz]

I don't know if it is this simple but all 7 of my evri simple delivery tracking numbers (as a buyer) have started with H05QTA.

The emails come from do-not-reply at evri (although this can be spoofed.)

(All 7 of mine were going to click and collect points - and) none of them included my name.

[lucy_farmer]

'....all 7 of my evri simple delivery tracking numbers (as a buyer) have started with H05QTA.'

---------------------------------------------------------------------------------------------------------------

Ah, the tracking number on these mystery messages also starts H05QTA... and the first one had my real full name on it.

Putting this tracking number into the Evri site (NOT clicked on- gone to from another screen)  just comes up with 'status not available at the moment. Please try again later'

But *nothing* comes up when you hover over the 'from address'. That just says 'Evri'.  No 'do not reply', nothing whatsoever....

I'm just puzzled, but not worried 😊 I haven't clicked on anything.

[3942rick2005]

I had a spate of Evri phishing emails last month. They seem to be popular at the moment. I always check the headers of any slightly suspicious emails and check out the originating IP address before even contemplating opening them.

Report them to phishing@evri.com they usually say thank you ( only time you get any response from them😃 )