Phishing scams are a growing concern for delivery drivers in Australia, with a recent wave of attacks targeting DoorDash and Uber drivers resulting in significant financial losses. The Transport Workers Union (TWU) has reported a surge in complaints over the past six months, with drivers losing tens of thousands of dollars. This issue is particularly concerning as many drivers are already struggling financially, taking on side hustles to make ends meet. The TWU's national secretary, Emily McMillan, highlights the vulnerability of this group, noting that they often face difficulties in resolving issues with the platforms due to limited staff and account lockout issues. The scam follows a pattern: a scammer impersonates a customer, places an order, and then tricks the driver into providing personal details, which are then used to access their accounts. The union suspects that the scam is run from within the app interface, using a technique called 'brute force' to crack passwords. Cybersecurity expert Troy Hunt emphasizes the responsibility of organizations in safeguarding against such attacks, but also acknowledges the delicate balance between security and user experience. The financial impact of these scams is significant, with Australians losing over $2 billion to scams last year, including $97 million to phishing scams. For individuals like Andrew Rhodes, the loss goes beyond money; it affects their mental health and the wear and tear on their vehicles. Rhodes calls for stronger protections in the industry, which has otherwise been beneficial to him financially. DoorDash and Uber have acknowledged the issue and stated their efforts to combat scam activity, but the need for improved security measures remains a pressing concern for drivers and the industry as a whole.
