The dawn of a fresh year doesn’t seem to have deterred cybercriminals, who are continuing to employ an old trick, now revamped for iPhone users. Reports suggest that phishing attacks aimed at iPhone users are on the rise, with the scammers using cunning methods to fool users into disabling built-in security measures and clicking on harmful links.

The trend shows an increasing number of fake text messages, seemingly from delivery agents, masquerading as service messages from the U.S. Postal Service (USPS). Contributors from various digital platforms, including Digital Trends, have reported receiving such deceptive messages.

The scam isn’t just limited to North America. There are instances from other parts of the world, like India, where online fraudsters are impersonating employees from DHL or FedEx.

Based on user posts in social forums, it appears this malicious tactic has been in operation for at least a few years. The messages typically follow a pattern, as seen in the samples provided. They often include instructions like “Please reply Y, then exit the SMS and open it again to activate the link, or copy the link to your Safari browser and open it.”

This seemingly innocuous instruction hides a nefarious intent. Responding with a ‘Y’ cleverly bypasses the phishing protection protocol on iPhones. Responding to the message changes the status of the scammer to a “known” sender. The malicious link then becomes active and can be opened in any browser.

In some instances, the dubious message prompts users to manually copy and paste the URL into the Safari browser. The destination of these links is uncertain but some reports suggest they direct users to a page where they’re asked to enter their credit card details.

To protect against such scams, it’s vital to scrutinize any text messages from purported mail services. Look for telltale signs of a scam like spelling errors, personal numbers or iCloud addresses as the sender’s details. Be wary of messages from foreign country codes. If you’re expecting a delivery, verify the status through official means.

The iMessage app offers a ‘Report Junk’ option for unknown senders. Use this feature before you respond to any suspicious message. Remember, you can’t report a message once you’ve replied to it.

If you haven’t yet opened the message, swipe left on it, tap on the bin-shaped red delete icon, and choose ‘Delete and Report Junk’. Blocking the sender can offer an extra layer of security.

Recently, the Cybersecurity and Infrastructure Security Agency (CISA) released an advisory on safeguarding your phone from cyberattacks. It’s recommended to familiarize yourself with these findings to ensure safe digital habits in the new year.