Impersonation
Look-alike domain used to redirect collection
An email from a domain one character different to a known haulier asks for a collection to be moved to a new address at short notice.
Indicators
- Domain differs by a single character
- Request made late in the day
- New collection address not previously used
Action
Verify by phone using a number already on file before changing any collection details.