Scam · pretends to be CF&S Latvia (a shipping and logistics company)
Fake shipping company email with Excel attachment
The real message, with personal details covered.
What happens
Criminals send mass emails posing as a logistics company, asking you to open an attached 'offer' spreadsheet. The file can install harmful software or steal logins.
Warning signs
- Sender address doesn't match The email comes from a Greek address (syn-eirmos.gr), but the signature says the company is CF&S Latvia with a cfs.lv address.
- Unexpected Excel attachment An .xls file named 'DOKUMENTA' (document) is attached; these files are often used to hide harmful programs.
- Hidden recipients It was sent to 'undisclosed-recipients', so it is a mass email sent to many people, not written for you.
- Vague request for offer It asks you to send a price list and offer for 'the attached product', but there is no real product detail.
- Subject line looks odd 'Document copy' and 'new offer + price list' are pushy, generic words made to make you open the file.
- Copied company signature A real company logo and name are used to look trustworthy, which is easy for criminals to copy.
How this scam works
- Criminals send the same email to many businesses, using a real company's name and logo.
- The email asks you to look at an attached 'offer' or 'document' file.
- When you open the file, it asks you to 'enable content' or 'enable editing'.
- This secretly installs a harmful program or sends you to a fake login page.
- The criminals then steal passwords, email access or bank details, or try to trick the business into paying fake invoices.
What to do
- Don't open the attached file, and don't reply to this email.
- Take a screenshot to keep as proof.
- Report it to CF&S Latvia through their official website and to your local police.
- Tell your family, friends and colleagues so they don't open similar emails.
Details to watch for
Websites syn-eirmos.gr cfs.lv
Links cfs.net/latvia/en
Phone numbers +371 ••• ••• 53
E-mails z•••@syn-eirmos.gr z•••@cfs.lv
Scammers can fake real names, numbers and logos. A number shown here may belong to an innocent person whose identity was misused.
Open this case in the scam library to like it or add a comment.