Can You Pass this Phishing Text Challenge?

A couple of days ago, I received a text message that was a textbook example of phishing. It seemed pretty obvious to me, but I decided to put ChatGPT o1-preview to the test and see what it could spot. Before you continue reading, take a look at the phishing text image and see how many anomalies you can find.

Think you can spot at least three red flags? If so, you've passed the test!

ChatGPT o1-preview identified five suspicious elements. I was particularly impressed by the fifth one—I missed that! I also discovered another anomaly: the area code 249 is actually in Ontario, Canada. That doesn't quite add up for a message supposedly from U.S. Customs.

Phishing attempts are still not that sophisticated; you can easily catch them before they catch you. So, how many anomalies did you spot?

Here's what ChatGPT o1-preview had to say:

• Suspicious Link: The URL provided (https://usps-parcel-ptshom.help/usunit) doesn't match the official USPS website, which is www.usps.com. Scammers often use deceptive links to trick users into providing personal information.
• Sender Inconsistency: The message claims to be from "U.S. Customs" but ends with "Have a great day from the USPS team!" This inconsistency is a red flag since official communications are typically clear about the sender's identity.
• Unusual Instructions: Asking you to reply with a "Y" and then reopen the text message to activate the link is unconventional and suspicious. Legitimate organizations don't require such steps for parcel delivery issues.
• Urgency and Pressure: The message creates a sense of urgency by stating you have 24 hours to act. Scammers often use time pressure to prompt quick responses without allowing you time to verify the information.
• Grammar and Phrasing Errors: Phrases like "the parcel can not be cleared, the parcel is temporarily detained" and "zip code address" are awkwardly worded, indicating the message wasn't crafted by a professional entity.