"Believing the 'Registered Mail Notice,' Victims Call First... Letter Phishing on the Rise"

Warning Issued Over "Letter Phishing" Scams


Fake Notices Claiming "Registered Mail Could Not Be Delivered" Attached to Doors

Scam Tactics Evolve, Now Involving Malicious App Installation and Video Call Demands

A growing number of so-called "letter phishing" scams are once again causing concern, involving counterfeit stickers crafted to resemble official postal notices placed on front doors to trick victims into making phone calls themselves.

A scam tactic is spreading where counterfeit stickers resembling postal notices are posted on front doors to誘victims into calling directly. Screenshot from social media (SNS)

According to reports from multiple media outlets on September 26, citing police sources, a voice phishing scheme is spreading in which criminals forge the Korea Post’s “Mail Delivery Notification” and attach the fake notice to apartment doors and mailboxes, thereby prompting victims to call the provided phone number.

Unlike typical voice phishing, where scammers initiate contact, letter phishing is characterized by the victim making the first call. According to the police, perpetrators design fake notices in a format similar to genuine ones, stating that “registered mail could not be delivered,” and include a phone number disguised as the mail carrier’s contact information.

When a victim calls the number, a scammer impersonating a mail carrier instructs the caller to contact another number under the pretext of reaching the relevant person in charge. Subsequently, someone posing as a prosecutor, police officer, or other investigative body claims the victim’s identity is linked to a criminal case, or that their bank account is involved with illegal funds, thereby pressuring the victim.

The scammers then demand that, for investigative purposes, the victim install a malicious application or access a specific website, and eventually request cash, gift certificates, or virtual assets.

Actual cases of damage have been confirmed. According to recent reports, a woman in her twenties in Seoul was deceived by a letter phishing scam into installing Telegram and was forced into a prolonged video call. She was even asked to provide body photos under the pretense of a physical checkup. There have also been instances in which victims were told to purchase separate mobile devices that cannot block the malicious app, with the intent to steal information stored on those devices.

Letter phishing is not a new type of fraud. Since 2023, the police have been warning the public about voice phishing scams using counterfeit mail delivery notifications.

In Gyeongju, North Gyeongsang Province, in 2023, a group distributed 1,538 counterfeit notices in apartment mailboxes and later impersonated prosecutors over the phone to demand payments from those who called. Police later tracked down the group’s leader in China, extradited them to Korea, and arrested them.

The police advise that if you come across a mail delivery notification, do not call the number directly; instead, verify the authenticity by contacting the local post office or the official Korea Post customer service number. They also emphasize that investigative or public agencies will never instruct you by phone to install specific apps or request personal information or cash.

If you discover a suspicious notice or suspect voice phishing, you can report it to the police (112) or the Financial Supervisory Service (1332). If you have installed a malicious app, you should block your phone’s network connection and immediately request your financial institution to suspend payments to prevent further losses.

This content was produced with the assistance of AI translation services.