FAKE shipment tracking scams are rapidly scaling worldwide, exploiting the 161 billion annual parcel volume that fuels global e-commerce, according to Group-IB. The firm’s Threat Intelligence research team detected a spike in this type of scheme exploiting the popularity of parcel delivery services in 2025, with more than 100 fake shipment tracking campaigns almost every month throughout the past year and peaks at 218 and 208 unique campaigns in June and December 2025, respectively.
Some of these campaigns are linked to Darcula, a Chinese-language phishing-as-a-service platform offering tools used in over 100 countries, though no single threat actor has been definitively linked to these schemes. Darcula Phishkit is said to offer more than 20,000 counterfeit domains to spoof brands and over 200 phishing templates, and Dracula used to commercialise its PhaaS kit through Telegram, though Group-IB noted the group removed public contact information following exposure.
The report urges mitigations such as educating the public, strengthening domain security protocols, and providing public verification tools to curb scam reach.