The Communication and Information Technology Regulatory Authority issued the alert after detecting a surge in fraudulent texts that appear to come from legitimate delivery services. According to CITRA, the messages typically request recipients to update shipment details or settle outstanding delivery charges by clicking embedded links. The authority’s Monday statement emphasized that these communications represent a phishing attempt aimed at harvesting personal and banking information from unsuspecting users.
CITRA advised all iPhone owners to refrain from interacting with any unsolicited messages containing links or requests for data. Users should instead verify delivery status exclusively through the official websites or applications of the actual shipping companies involved, the regulatory body stated. The authority further recommended immediate deletion of suspicious texts and reporting them as junk to limit the spread of such scams across the iMessage platform.
This warning forms part of ongoing efforts to combat digital fraud in Kuwait, where the Central Bank of Kuwait released a similar cybersecurity advisory on parcel scam messages in June 2026. That earlier notice from the bank similarly cautioned against responding to verification requests or clicking links tied to undelivered packages. Ministry of Interior statements throughout 2026 have repeatedly highlighted parallel scams involving fake traffic fines and discount offers distributed via social media and messaging apps.
A 2022 analysis by Kuwaiti authorities, referenced in subsequent regulatory updates, documented a measurable rise in phishing and social engineering attacks targeting residents. CITRA has continued to track these incidents, with one recent compilation indicating the body processed 156 reports of fraud and scam attempts in a single period. Such figures underscore the persistence of delivery-themed lures, which exploit the high volume of legitimate e-commerce notifications received by consumers.
The regulatory authority’s latest guidance aligns with broader patterns seen across the Gulf, where comparable warnings have addressed exploitation of popular messaging services. CITRA stressed that official communications from shipping providers will never solicit payments or data through unverified links sent via iMessage. Recipients encountering these messages should treat them as unauthorized regardless of how authentic the sender information appears.
Separately on Monday, the Kuwait Fire Force issued its own safety notice concerning electronic devices after reviewing fire incidents linked to improper charging practices. Kuwait Fire Force Public Relations Director Brigadier General Mohammad Al-Gharib highlighted risks associated with placing phones, tablets and laptops on beds or flammable surfaces during charging. The force urged users to monitor devices for overheating signs, avoid extended plug-in times and contact emergency services at 112 immediately if a fire begins.
