Tariff Scams: Fake Customs Fees and Package Payment Requests

Headlines as Harpoons: Training Your Team to Spot Tariff Scams

As security awareness professionals, we know that scammers are world-class opportunists. They don’t just “send emails”—they craft narratives based on the morning news. Currently, the confusion surrounding international trade and shifting government policies has created the perfect cover for a new wave of tariff-themed phishing attacks.

When employees see headlines about new taxes on imports, they are much more likely to believe a text or email claiming their latest online order is “held at customs” pending a small fee. Our job is to provide the mental framework they need to pause before they pay.

Guidance to Encourage in Your Security Awareness and Training Programs

To help your workforce navigate these headline-driven threats, prioritize these specific defensive strategies:

• The “News-to-Noise” Connection: Explicitly teach your team that scammers “follow the headlines.” When a topic like tariffs is trending, they should expect a surge in related phishing attempts. This turns a news cycle into a proactive warning for your staff.

• Identify the “Customs” Red Flag: Remind employees that while legitimate fees can occur, they are rare for standard consumer or office orders. If a message demands immediate payment via a link to “release” a package, it should be treated as high-risk by default.

• The “.gov” or Bust Rule: Scammers are setting up hundreds of fake portals to mimic government sites. Reinforce that any official U.S. government request for customs or tariff information will always come from a .gov domain, never a .com, .net, or .org.

• Demand the Documentation: Real tariff charges come with official government forms, such as Form 7501. Advise your team that if a “billing agent” or text message cannot provide specific import documentation or an official tracking number that works on the carrier’s main website, it is a scam.

• Verify Through the Source: If an employee is concerned about a package, they should never use the contact info provided in the suspicious message. Instead, they should log directly into the retailer’s site (e.g., Amazon, Wayfair) or the carrier’s official app to check for legitimate alerts.

By linking security awareness to current events, you move from “static” training to a dynamic defense that prepares your team for the next big headline scam.

Read the full breakdown of tariff and customs scams here: Tariff Scams: Fake Customs Fees and Package Payment Requests