#User Education

Thanks FedEx, This Is Why We Keep Getting Phished (2024)

Legitimate delivery and payment notification systems are so poorly designed and riddled with security flaws that they are indistinguishable from phishing attacks, creating a critical vulnerability where users cannot reliably authenticate genuine communications. This represents a systemic failure where major companies like FedEx and financial institutions like Commonwealth Bank have implemented payment verification systems with basic security defects (parameter tampering, inconsistent formatting, invalid links) that actively enable scammers and erode user trust. IT organizations must recognize that security education alone cannot protect against threats when legitimate systems exhibit identical red flags to malicious ones, requiring urgent collaboration with business and product teams to redesign customer-facing authentication and payment processes.