‘Cleaning Superstore’: warning over missed delivery text scam on WhatsApp

The text mimics a common fraud, but differs in that criminals appear to have hacked a genuine business account

John the delivery driver has tried to drop off something at your home from a company called Cleaning Superstore but you missed him, according to the message you have received via WhatsApp.

Although you cannot remember buying anything from the company, the text appears to have come from a legitimate WhatsApp account so you try to rearrange delivery by clicking the link provided.

You are then asked to pay a few pounds to have the package redelivered and to give your personal details.

The text is a scam but losing any money you pay in fake fees will be the least of your worries as the fraud is designed to harvest your bank and personal details.

The Cleaning Superstore text has been popping up on phones recently in the UK and mimics a longstanding fraud, claiming that the recipient has missed a delivery.

Where it differs, is that the text appears to be from a legitimate business, Cleaning Superstore, which is based in the United Arab Emirates.

Lisa Webb, a lawyer at the consumer group Which?, says criminals appear to have hacked a genuine account.

“Because the messages appear to come from a verified legitimate business account, recipients are probably going to be more likely to trust the message than one that is not verified or just from a random number,” says Webb.

Even if you just supply your name, address and email, you may leave yourself open to future scams.

The legitimate Cleaning Superstore in the UAE did not respond to a request for comment.

What it looks like

“PRCL/GB Sorry we missed you today! Our delivery driver, John attempted to reach you but failed to do so. Visit [phishing link] to redeliver,” the WhatsApp message says.

When you click through to the link, you will be asked for your personal details, such as name and address, and to pay a small fee for redelivery.

One person who received the text posted on Trustpilot saying they were redirected to a fake Evri delivery page.

If the payment details are supplied, then the criminals will be able to deduct money as they wish. They will often do this in small amounts over a long period so as not to arouse suspicion.

Or they may try to take one large sum and hope it goes through at a time when you are spending a lot and might not notice, such as Christmas.

What to do

Do not click on the link, share or forward it to anyone. If you do click on the link, then do not to share any personal details.

If you do hand over your account details, contact your bank once you realise your mistake. If you get a notification on your phone that a payment has been attempted, then tell the bank that it was not you.

“Monitor [the account] for any suspicious activity,” says Webb. “Banks can put a [mark] against your account so that suspicious activity is flagged, almost as if they’re keeping an eye out for it for you. But this scam is designed to harvest personal and financial information. So that means that you are at greater risk of future fraud, even if no immediate money is lost, which is why it’s absolutely essential that you report.”

WhatsApp has options to report the message and block the sender.