Thanks FedEx, This is Why we Keep Getting Phished

A recipient investigates FedEx/BPOINT duty-and-tax SMS messages that resemble phishing—citing urgency, typos, inconsistent casing, unclear currency, and malformed links—and struggles to validate them via FedEx’s website and support, discovering the BPOINT URL accepts arbitrary parameter tampering that further mimics phishing behavior; days later, an official email with invoice confirms the charges were legitimate, underscoring how poor communication and link design from FedEx/BPOINT make real messages indistinguishable from scams and undermine both human and technical anti-scam controls.