Zepto spam is a type of smishing scam that sends text messages to random phone numbers with links claiming the recipient has won rewards like gift cards or iPhones. The messages often say something like “Congratulations! You’ve won a free iPhone from Zepto. Click here to claim your prize.” If the link is clicked, it takes the victim to a phishing site designed to steal personal information.
What is the goal of Zepto spam messages?
The goal of Zepto spam messages is to trick recipients into clicking the link and visiting the phishing site. The phishing sites are designed to look legitimate and will ask the victim to enter personal information like name, date of birth, address, and credit card details to “claim” their “prize.” This information is then stolen and sold or used for identity theft and financial fraud.
Why is it called Zepto spam?
The messages often claim the prize or gift card is offered by “Zepto” to make it sound like a legitimate company. However, Zepto is not actually associated with these text messages. Zepto is an Indian instant grocery delivery app that has no connection to the spam texts. The scammers just use the name Zepto to lend credibility to their messages.
How are the phone numbers obtained?
The phone numbers used for Zepto spam texts are usually randomly generated. The scammers use autodialing technology to send automated text blasts to thousands of numbers at once. They do not have a specific list of targets, just a program that cycles through different number combinations to maximize the number of people reached.
How can I tell if a text is Zepto spam or legit?
Here are some signs a text message you receive about a Zepto prize or gift card is spam:
- You never signed up for anything from Zepto or don’t have an account with them
- The message is unsolicited and comes out of the blue
- It uses urgent language like “claim now” or you only have a limited time
- It contains spelling and grammatical errors
- The link uses a URL shortener instead of a valid zepto.com address
- It asks for personal information like credit card or Social Security numbers
A legitimate message from Zepto would address you by name, reference an actual order or account, and provide customer service contact information. Anything asking for personal data or using suspicious links should be considered a scam.
Are the prizes mentioned in the texts real?
No, there are no real prizes to be won from these Zepto spam texts. They dangle free gifts and rewards as bait, when in reality the links only lead to phishing sites designed to steal your information. No major company or retailer sends out random texts awarding free products. The promised gift cards and iPhones do not exist – the scammers are just using them as lures.
What phishing techniques are used on the scam sites?
The phishing sites the spam texts link to use a variety of tricks to get victims to give up personal data:
- Look identical to real brand sites using copied logos and graphics
- Frantically warn time is running out to claim the “prize”
- Redirect victims to another site after harvesting some info to hide their tracks
- Threaten you have to enter credit card data for a small “processing fee”
- Hide the real suspicious URL behind a façade of “https” and a padlock icon
Be very wary of any site you land on from an unsolicited text, as the scammers work hard to make them look authentic.
What information are the scammers trying to steal?
Zepto spam sites try to gather the same type of personal info criminals can use for financial fraud or identity theft:
- Full name and date of birth
- Home address and email address
- Phone number and Social Security number
- Credit card numbers and security codes
- Driver’s license details
- Online account credentials
With enough of the above data, scammers can steal identities, make unauthorized purchases, access bank accounts, take over social media profiles, and more. Never enter sensitive information on any site you don’t completely trust.
What happens if you click the links or enter your information?
If you click on the link in a Zepto spam text, you will be directed to a scam phishing site where criminals will immediately start collecting your personal information. If you enter any details, they will be harvested by the scammers to use or sell for identity theft and financial fraud purposes. At best, you will start receiving more frequent spam texts and calls. At worst, you may have your identity, money, or accounts stolen.
Should you reply STOP to unsubscribe from the spam?
No, you should not reply STOP or attempt to unsubscribe from Zepto spam texts. The messages are sent out randomly by bots, not actual people monitoring responses. Replying confirms to the scammers that your phone number is active. This flags your number for additional spam texts, or even increases the frequency you receive them. The best thing to do is ignore and delete the texts immediately without responding.
Can you block the numbers sending Zepto spam?
It’s unlikely blocking a single number will stop Zepto spam texts for good. The scammers use programs that can rapidly generate and cycle through millions of different numbers. One source number may send hundreds of texts before getting blacklisted and rotating to a new one. Your best defense is using universal call and text blocking apps to filter out the automated spam.
Should you report Zepto spam texts?
Reporting spam texts is a good idea for a few reasons:
- It helps crowdsource data on new scam trends for authorities to stop.
- Reporting to cell phone carriers can get fraudulent source numbers blocked.
- The more reports about a phishing site, the faster it may get taken down.
To report Zepto spam texts, contact:
- Your cell phone carrier
- The FTC’s Do Not Call registry
- Organizations like the Better Business Bureau
You should also report the specific phishing sites to their web hosts, registrars, or by flagging them in your browser.
Who is behind the Zepto spam operation?
It is unclear exactly who is coordinating the Zepto smishing campaign, as the scammers go to great lengths to conceal their identity. The texts are sent from randomly changing numbers operated by bots, so cannot be traced to any one person or group. It is likely a professional cybercriminal organization skilled at mass-spamming that constantly evolves their tactics to evade authorities. Similar gift card and prize scams have been tracked back to India, but the actual culprits are difficult to identify.
Why has there been an increase in Zepto spam texts?
Experts cite several possible reasons for the recent surge in Zepto spam texts:
- Cheap bulk SMS technology makes text blasts easy and affordable.
- More business is conducted via mobile, so phones are a lucrative target.
- Scammers like spoofing real brands like Zepto to look authentic.
- The masses getting scammed provide big profits for cybercriminals.
- Many people still don’t realize texts can be used for phishing.
As more communication shifts to phones, scammers will continue probing for ways to take advantage via spam texts unless stronger protections are put in place.
What can you do to protect yourself from Zepto spam?
Here are some key tips to avoid getting scammed by Zepto spam texts:
- Never click on suspicious text message links or reply to them.
- Be wary of texts warning you have to act now for a “prize.”
- Look for telltale signs like bad grammar, spelling errors, or unlabeled links.
- Google any companies mentioned along with words like “scam” or “spam.”
- Never enter personal info on sites you aren’t 100% sure are legitimate.
- Use spam call and text blocking apps and enable them through your carrier.
- Report scam texts to help identify new phishing trends.
Staying vigilant and keeping your personal information secure makes you much less likely to become a victim of predatory spam texts.
What can be done to stop Zepto spam at the carrier level?
Cell phone carriers and authorities are taking steps to combat the growing threat of scam text spam, including Zepto smishing:
- AT&T, Verizon, and T-Mobile block millions of fraudulent numbers.
- Carriers use AI to detect spam traffic patterns.
- Reported scam numbers can be quickly blacklisted.
- Fines now exceed $100 million for illegal robocallers.
- The FCC is requiring carriers to block invalid texts.
- Regional task forces work to track down spam sources.
However, the numbers in use change so rapidly that it remains challenging for carriers to keep up. New legislation and steeper penalties for spammers could help enhance protections against scam text spam threats.
Conclusion
Zepto spam texts are an invasive form of smishing designed to trick victims into surrendering personal information under the guise of prize or gift card offers. The scammers hide behind randomly changing numbers and fake claims of being associated with real brands. Avoid clicking any links, report the messages, and use common sense precautions against text spam. With diligence from individuals and expanded initiatives from carriers, the impact of scam spam texts like Zepto can be reduced.
