May 11, 2011 - Significant activity was detected on May 9 related to spam email messages that claim to contain a Canada Post shipment notification. The text in the email message instructs the recipient to follow a link to view an invoice.
These emails are not coming from Canada Post, and are fraudulent. Please do not click on the links or open any attachments. The anonymous authors of this email virus unfortunately are using the Canada Post name to get you to trust the message.
"Subject: Your package has arrived!
Your package has been shipped.
The tracking# is: RTO948101422K and can be used at:
The shipping invoice can be downloaded from:
Canada post corporation"
Several versions of the message are circulating, and could include different tracking numbers depending on the variant of the message you receive. We are aware of one version which is falsely reporting delivery of a package from the Heart and Stroke lottery foundation, and there may be others circulating with different package senders being spoofed.
Steps you can take to protect yourself if you receive an email that appears to be from Canada Post:
- If you feel the email is suspicious or there is an attachment, delete it.
- Whether you are expecting a package delivery by Canada Post or not, and there is a tracking number in the email, you can do the following:
- Check the tracking number by going directly to www.canadapost.ca and entering the tracking number on the home page where indicated.
- If the tracking number is not valid, "Invalid Tracking Number format. Please check your entries and try again." will appear on the screen in red letters. Delete the email without clicking any links which may be in the email.