A new digital system worries consumers and security experts. Known as the “order scam”, the fraud extends to WhatsApp and is notable for its sophistication: criminals use victims’ real data and even photos of orders to give credibility to messages, which direct them to fake tracking pages and charge non-existent fees.
- How to schedule messages on WhatsApp: know how to use apps that do this for you
According to Felix Lauzem, head of cybersecurity at SEK, the use of personal information makes the scam more convincing and difficult to identify.
Fraud strengthens with data leaks
The practice went viral after reports of international purchases and weaknesses revealed in the processing of data by shipping companies and marketplaces. According to experts, some information used by fraudsters could come from leaks from carriers, partner systems or electronic invoices, which opens the way to personalized attacks. In simpler versions of the scam, messages are sent in bulk via SMS, targeting people waiting for deliveries.
To protect yourself, the main recommendation is to remain suspicious of any links sent via channels such as SMS or WhatsApp. “Never click on messages. If in doubt, consult the official application of the carrier, marketplace or regulatory body directly,” advises Lauzem, according to TechTudo. Additionally, it is important to avoid payments via Pix or bank transfer outside verified platforms and never enter card details on suspicious websites.
/i.s3.glbimg.com/v1/AUTH_da025474c0c44edd99332dddb09cabe8/internal_photos/bs/2025/4/n/DCS7wCQ5uQU2gEWAAktw/image-2025-12-12t100022.489.png)
Basic safety practices also help reduce risks. Experts recommend enabling two-step verification on WhatsApp and email, creating strong and different passwords for each service, keeping antivirus active, and avoiding purchases or financial transactions on public networks. Keeping your cell phone and computer up to date is also essential to reduce exposure to attacks.
If the consumer realizes that they have fallen for the scam, rapid action is essential to limit the damage. The advice is to contact the bank immediately to block the card or try to reverse Pix, change passwords and file a police report. Lauzem also reinforces the importance of notifying family and friends: “Acting quickly can prevent criminals from using the compromised account to deceive others.”
About The Author
