AdamEatsAss, 1 year ago

A few weeks ago I shipped a package USPS and I wanted to track it’s progress. I googled USPS tracking and clicked on the first link that popped up. The search result looked like the USPS website and said USPS .com and had the same preview text that the actual website used but it was actually a Google ad that redirected me to supertracking .com. This fake website looked exactly like the USPS tracking website, the domain the web browser displayed was wrong but everything on the page was right, the buttons on the bottom and top even sent you back to the official USPS site. The fake site was set up so that no matter what you entered it would say the address was wrong and you had to update it for a $1.50 address update fee. I would have grown suspicious here except I actually did put the wrong zip code down when I shipped it. Again all the forms looked legit so I put my credit card info in after updating the address, then it wanted me to confirm my bank account login and pin. This is where I stopped because there is no reason for them to collect that data. I saw it was the wrong website and looked back in my history and sure enough I clicked on an ad without realizing it. I reported the domain, reported the ad, and cancelled my credit card. It was really scary how real the website felt, I didn’t suspect anything until they wanted bank info.