Researchers Warn of Global Surge in Fake Shipment Tracking Scams

### Executive summary Group-IB observed a rapid global surge in fake shipment tracking phishing campaigns in 2025, identifying over 100 unique campaigns monthly with peaks above 200; many campaigns share infrastructure and characteristics tied to the Darcula phishing-as-a-service platform. Attackers use disposable and lookalike domains, SMS sender ID spoofing, URL masking and mobile-optimized pages to harvest personal and financial data; the report includes mitigation advice for businesses and consumers.