Scammers are stealing personal details from discarded delivery boxes to trick online shoppers with fake discount links and steal sensitive information.