Swiss Online Retailer Loses Packages to Invoice Fraud Scam Using Stolen Identities

A new invoice-based fraud scheme is targeting Swiss online retailers. Scammers use stolen personal data to place orders on credit and intercept packages at postal lockers by accessing victims' delivery credentials. Small businesses are particularly vulnerable to this scam.

How the Scam Works

This invoice-based fraud targets Swiss online retailers through a coordinated scheme involving stolen identities and postal system exploitation.

The Attack Method

Scammers execute this fraud in several steps:

Identity Theft: Criminals obtain personal data (name and address) of individuals without their knowledge
Invoice Payment Selection: They place orders on online shops using the stolen identity and choose invoice payment, avoiding immediate payment detection
Postal Credential Access: The scammers gain unauthorized access to the victim's Swiss postal account credentials ("My Shipments" personal ID), likely through data breaches or phishing campaigns
Delivery Redirect: They change the delivery address from the legitimate destination to an automated postal locker
Theft: The criminals retrieve the diverted packages from the postal locker

Why Small Businesses Suffer Most

Large e-commerce platforms have sophisticated fraud detection systems. Smaller online retailers often lack these protections and face significant financial losses. For family-run businesses, even a single sophisticated attack can threaten operations and force difficult decisions like temporarily disabling invoice payment options, which may cost tens of thousands in lost revenue.

Warning Signs

Unusual delivery redirections to postal lockers, especially when not requested
Multiple invoice payment orders within a short timeframe
Customers reporting they didn't place orders but invoices are pending
Non-delivery of high-value items despite successful dispatch confirmation
Suspicious access notifications from your Swiss postal account

How to Protect Yourself

For Online Retailers:

Monitor shipping address changes for high-value orders
Request additional verification for suspicious transactions
Coordinate with Swiss Post to identify fraudulent patterns
Consider temporary restrictions on invoice payment for high-risk orders
Report suspected fraud immediately to authorities and postal services

For Consumers:

Change your Swiss Post account password regularly
Be cautious of phishing emails claiming to be from postal services
Check your "My Shipments" account for unauthorized access
Immediately update credentials if notified of data breaches
Report suspicious account activity to Swiss Post immediately

Where to Report

Contact Swiss Post (Die Schweizerische Post / La Poste) customer service immediately if you suspect fraudulent activity. File a police report (Anzeige/Plainte) for criminal investigation. Report data breaches to Swiss Post security team for pattern analysis.