
SCARS Institute’s Encyclopedia of Scams™ Published Continuously for 25 Years

FluBot: Package Delivery Text Message Shipping Scam
The ‘FluBot’ spyware, sent via package delivery text messages, affects Android phones and devices
No, you are never safe online anymore!
Governments around the world are aware that a new malicious piece of spyware – known as FluBot – is affecting Android phones and devices across the globe.
The spyware is installed when a victim receives a text message, asking them to install a tracking app due to a missed package delivery.
The tracking app is in fact spyware that steals passwords and other sensitive data.
It will also access contact details and send out additional text messages – further spreading the spyware.
The text message requests that victims click a link. Doing so directs them to a scam website, such as the one shown below (although the branding may vary).
- Users of Android devices (such as those manufactured by Google, Huawei and Samsung) will be encouraged to download an app.
- Users of Apple devices are not currently at risk (as of the date of this article, but that can change without notice), although the scam text messages may still redirect them to a scam website that may still try to steal your personal information.
If you receive a scam text message:
- Do not click the link in the message, and do not install any apps if prompted.
- Forward the message to 7726 (SPAM) in the U.K. or the U.S.A., a free spam-reporting service provided by phone operators.
- Delete the message.
If you were expecting a DHL delivery, you should visit the official DHL website (search in Google to make sure you spell it corrctly) to track your delivery. Do not ever use the link in the scam text message.
If you have already clicked the link to download the application:
You must take the following steps to clean your device, as your passwords and online accounts are now at risk from hackers.
Do not enter your password, or log into any accounts until you have followed the below steps.
To clean your device, you should:
- Perform a factory reset as soon as possible. The process for doing this will vary based on the device manufacturer and guidance can be found here. Note that if you don’t have backups enabled, you will lose data.
- When you set up the device after the reset, it may ask you if you want to restore it from a backup. You should avoid restoring from any backups created after you downloaded the app, as they will also be infected.
To protect your accounts:
- If you have logged in to any accounts or apps using a password since downloading the app, that account password needs to be changed.
- If you have used these same passwords for any other accounts, then these also need to be changed.
To protect yourself from future scams like this, you should:
- Back up your device to ensure you don’t lose important information like photos and documents. The CyberAware campaign explains how to do this.
- Only install new apps onto your device from the app store that your manufacturer recommends. For example, most Android devices use Google’s Play Store. Some manufacturers, such as Huawei, provide their own app store.
- For Android devices, make sure that Google’s Play Protect service is enabled if your device supports it. Some Huawei devices provide a similar tool to scan devices for viruses. This will ensure that any malware on your device can be detected and removed.
Footnote – While messages so far have claimed to be from DHL, the scam could change to abuse other company brands.
TAGS: SCARS, Information About Scams, Anti-Scam, Scams, Scammers, Fraudsters, Cybercrime, Crybercriminals, Scam Victims, Online Fraud, Online Crime Is Real Crime, Scam Avoidance, FluBot, Package-Delivery, Text Message Scam
PLEASE SHARE OUR ARTICLES WITH YOUR FRIENDS & FAMILY
HELP OTHERS STAY SAFE ONLINE – YOUR KNOWLEDGE CAN MAKE THE DIFFERENCE!
THE NEXT VICTIM MIGHT BE YOUR OWN FAMILY MEMBER OR BEST FRIEND!
By the SCARS™ Editorial Team
Society of Citizens Against Relationship Scams Inc.
A Worldwide Crime Victims Assistance & Crime Prevention Nonprofit Organization Headquartered In Miami Florida USA & Monterrey NL Mexico, with Partners In More Than 60 Countries
To Learn More, Volunteer, or Donate Visit: www.AgainstScams.org
Contact Us: Contact@AgainstScams.org
-/ 30 /-
What do you think about this?
Please share your thoughts in a comment below!
Table of Contents
To Understand All Scams
Read This
The SCARS Institute Relationship Scams Formula Checklist
This is the Formula that all Relationship Scams Follow
Recent Comments
On Other Articles
- Barbara on SCARS Institute – Romance Scam Simulator: “Fantastic! I have to go to bed, but I’ll do some more tomorrow. I picked an easy scenario tonight, but…” Oct 9, 18:01
- on United States – Federal Bureau of Investigations [FBI]: “It is only that way because of the shame you feel. The reality is that it was not your fault.…” Sep 30, 15:36
- on United States – Federal Bureau of Investigations [FBI]: “yhisis humiliating experience e and isembarassassing to to own up to peolealreadyassume u are not to bright because Arnold and…” Sep 30, 12:28
- on United States – Federal Bureau of Investigations [FBI]: “should be better known by public live in assisiwdlivi g apartment many manyinstancresof Romance scams here ano.us ederly l” Sep 30, 12:24
- on Is It A Scam? Phone Scam Diagnostic – v1: “I tried the this test Is it a phone scam? Mine was. I think this is a helpful tool to…” Sep 30, 10:34
- on Is It A Scam? Romance Scam Diagnostic – v2: “Carole, as you move forward with your recovery, you will learn how this all works. It was not your fault.…” Sep 29, 17:37
- on Is It A Scam? Romance Scam Diagnostic – v2: “I was blinded by such clever manipulation” Sep 29, 15:15
- on The SCARS Institute Relationship Scams Formula Checklist – 2026: “As I read this I could see myself in every step with my scam. I gained a lot more knowledge…” Aug 28, 19:51
- on The Persistence of Danielle Delaunay as a Fake Identity – 2026: “Unfortunately, you are being scammed. She is using a fake name regardless. At this point, your best option is to…” Aug 26, 20:16
- on The Persistence of Danielle Delaunay as a Fake Identity – 2026: “Dear Sirs, I have met this woman with the name Abigail Boateng in Ghana. I have an intensive mail contact…” Aug 26, 12:28







Thank you for your comment. You may receive an email to follow up. We never share your data with marketers.