{"id":272937,"date":"2026-05-13T14:55:08","date_gmt":"2026-05-13T10:55:08","guid":{"rendered":"https:\/\/armbanks.am\/?p=272937"},"modified":"2026-05-13T14:55:25","modified_gmt":"2026-05-13T10:55:25","slug":"cannot-deliver-your-package-idbank-warns-about-fake-messages-from-haypost","status":"publish","type":"post","link":"https:\/\/armbanks.am\/en\/2026\/05\/13\/272937\/","title":{"rendered":"\u201cCannot deliver your package\u201d. IDBank warns about fake messages from \u2018\u2019HayPost\u2019\u2019"},"content":{"rendered":"\n<p><strong>YEREVAN, May 13. \/ARKA\/.<\/strong> In Armenia, a wave of mass messages is being recorded that exploit trust in the national postal operator HayPost. Attackers use the expectation of the package as a fake reason to steal banking data or install spyware on users\u2019 smartphones.<\/p>\n\n\n\n<p><strong>How the scam works: from SMS to full control of the device<\/strong><\/p>\n\n\n\n<p>The scheme begins with receiving an SMS, an e-mail or a massage in a messenger. The text always imitates an official notification: it reports a \u201cmistake in the address\u201d or the need to pay a small additional fee (usually 2000-3000 AMD) for customs clearance or storage.<\/p>\n\n\n\n<p>In order to \u201csolve the problem\u201d the victim is asked to follow a link. From here the scenario splits into two dangerous paths:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Stealing bank credentials. <\/strong>The link leads to a phishing website that looks identical to the HayPost interface. When attempting to \u201cpay the additional fee,\u201d the user enters full card credentials, including the three-digit code on the back of the card and the SMS verification code, effectively giving scammers access to their account.<\/li>\n\n\n\n<li><strong>Installation of spyware. <\/strong>The user is offered to download an \u201cofficial app\u201d for tracking (often in .apk format for Android). In reality, it is a spyware, that gains an access to banking apps, intercepts passwords and allows scammers to remotely control the device.<\/li>\n<\/ul>\n\n\n\n<p>Important detail: the message nearly almost lacks specifics. Such notifications usually don\u2019t explain which particular package is being referred to: there is no specific tracking number, no exact sender information, and no other important details. The scam relies on inattention, haste and curiosity: \u2019\u2019what if this is my package \u2013 I\u2019d better fix it quickly.\u201d<\/p>\n\n\n\n<p>Postal phishing is a global trend and its popularity among the scammers rises especially during holiday seasons and online sales. In Armenia, this scheme is considered critically dangerous: the Central bank and HayPost annually issue official warnings about fake domains.<\/p>\n\n\n\n<p><strong>Legal trap<\/strong><\/p>\n\n\n\n<p>What makes this \u201cpostal\u201d scheme especially deceptive is that the user voluntarily enters their data on a fake website. As the transaction is confirmed with a one-time password, the bank treats it as legitimate. In case of spyware installation, the situation becomes more complicated: voluntarily installing software from unverified sources removes financial institutions\u2019 responsibility for subsequent transactions.<\/p>\n\n\n\n<p><strong>IDBank recommends:<\/strong><\/p>\n\n\n\n<p>Digital hygiene is the only reliable way to protect your money. Follow these rules:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Check the domain. <\/strong>Official massages from HayPost come only from the haypost.am domain.\u00a0 Any variations such as <em>haypost.cc, <\/em>haypost<em>.click<\/em> or <em>hay-post.info<\/em> \u2013 are a 100% sign of fraud.<\/li>\n\n\n\n<li><strong>Do not follow links in messages. <\/strong>If you are really expecting a package, check its status on the official website by entering the tracking number manually or via the official mobile app, downloaded from the App Store or Google Play.<\/li>\n\n\n\n<li><strong>No \u201cadditional fees\u201d on third-party websites. <\/strong>Real postal services do not request small transfers via messengers for \u201caddress correction.\u201d<\/li>\n\n\n\n<li><strong>Use official support. <\/strong>If you have any doubts, contact with HayPost using the official number: <strong>010 514514.<\/strong><\/li>\n<\/ul>\n\n\n\n<p>If you have already followed the link and entered your data or installed an app, immediately contact your bank using official channels and follow the support team\u2019s instructions.<\/p>\n\n\n\n<p>Remember: your financial security starts with your vigilance. Do not let fake notifications become a real threat to your budget.<\/p>\n\n\n\n<p>IDBANK IS SUPERVISED BY THE CBA<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In Armenia, a wave of mass messages is being recorded that exploit trust in the national postal operator HayPost. Attackers use the expectation of the package as a fake reason to steal banking data or install spyware on users\u2019 smartphones.<\/p>\n","protected":false},"author":5,"featured_media":272931,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":"","tstyn_error":""},"categories":[12315,9214,9216],"tags":[15541],"class_list":{"0":"post-272937","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-announces","8":"category-banks-en-en","9":"category-news","10":"tag-idbank-2"},"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/armbanks.am\/en\/wp-json\/wp\/v2\/posts\/272937","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/armbanks.am\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/armbanks.am\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/armbanks.am\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/armbanks.am\/en\/wp-json\/wp\/v2\/comments?post=272937"}],"version-history":[{"count":1,"href":"https:\/\/armbanks.am\/en\/wp-json\/wp\/v2\/posts\/272937\/revisions"}],"predecessor-version":[{"id":272938,"href":"https:\/\/armbanks.am\/en\/wp-json\/wp\/v2\/posts\/272937\/revisions\/272938"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/armbanks.am\/en\/wp-json\/wp\/v2\/media\/272931"}],"wp:attachment":[{"href":"https:\/\/armbanks.am\/en\/wp-json\/wp\/v2\/media?parent=272937"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/armbanks.am\/en\/wp-json\/wp\/v2\/categories?post=272937"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/armbanks.am\/en\/wp-json\/wp\/v2\/tags?post=272937"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}