Canada Post emall scam?

[Sr. Mints]

I got an email from Canada Post saying that they attempted to deliver a package today, and that I wasn't home to answer the door. The email came from tracking@canadapost.ca and looked legit.

Here's the email:

We attempted to deliver your item at 09:30 am on March 22th, 2012.
The delivery attempt failed because nobody was present at the shipping address, so this notification has been automatically sent.
You may arrange redelivery by visiting the link below or pick up the item at the Canada Post Office indicated on the receipt.
If the package is not scheduled for redelivery or picked up within 48 hours, it will be returned to the sender. Label/Receipt Number: 79538627396
Expected Delivery Date: March 22th, 2012
Class: Package Services
Service(s): Delivery Confirmation
Status: eNotification sent

To download the shipping receipt, in PDF format, visit:
www.so-and-so.com

To check on the delivery status of your mailing or arrange redelivery please visit the following URL:
www.so-and-so.com



Thank you,
© 2012 Canada Post Corporation
*** This is an automatically generated email, please do not reply ***

I am expecting a package from Amazon, so I followed the instructions to a website to download the shipping receipt, and a .pif file downloaded. I also tried entering the label/receipt number which wouldn't work.

I assumed Canada Post's website was simply screwed up, so I printed the email and took it to my usual post office, where the lady working there told me "this is weird" because they hold packages for two weeks, not two days. There was nothing for me.

Almost right after I got home tonight, a UPS truck showed up with my package. Canada Post had no involvement in this order at all.

Now that I think about it, a few things are weird:

1.) This Canada Post email came to my Hotmail address, which is not listed in my Amazon, eBay or any online shopping destination's store.

2.) The timing of this is frighteningly accurate, or a total fluke. I wonder if the sender of the email has some kind of garbage installed on my computer tracking me (or something.)

3.) The .pif file. At first I thought a screw up on Canada Post's website, but I've since deleted the file I downloaded.

Anyone else experience something like this?

[Notorious Honey Badger]

fake. canada post gives you 14 days to pick up items at RPO's

at 1st glance.

on 2nd glance still looks fake. amazon packages, which i've had delivered before, are simply left at your home.

canada post never does this stuff online like im seeing here. if you arent home a delivery notification card, or, DNC, is left at your home or mailbox. fake fake fake.

3rd glance one link goes to .de and is suspicious to say the least

[Brotato]

Dude that link isn't to canadapost, it's a spoofed URL. When I highlight it it's actually a german server with a PDF GIF.

[Brotato]

Op -remove that link now it is a virus!

[getbak]

I assume you pasted the text straight from the email, and if roll over the link, it points to: http:// vserver1931.vserver-on.de /pdf_receipt.pif (I added spaces so that the forum software doesn't turn it into a link, hopefully no one clicks on the link).

I don't know what a PIF file is, but I wouldn't open it.

[Pizza]

seriously sr mint, you better take those links down or you'll get other CPers sucked in.
and... get some help with your pif file virus

[DownInFlames]

Spotting A Phishing Scam 101 is to hover over a link, and if the url is different, it's a scam.

[Sr. Mints]

I removed the links. I originally checked the email on my phone, no mouse to hover over.

I hate the internet.

[BlackArcher101]

Sooooo many clues that it's a complete scam.

[flylock shox]

The government got hit by a Canada Post email attack about 6 months ago. Extremely credible looking email, right down to the French translation. I imagine these are particularly effective given the trusted image of Canada Post, and the number of people using them for shipping to or from.

Very sneaky.

[afc wimbledon]

You always know it is not a real canada post email because the virus is fast and very effective and works 24 hours

[Handsome B. Wonderful]

Suspicious PIF files? Wow, haven't seen that since Windows 95.