“Your package is on hold. Pay a small fee to release it.” Almost everyone is waiting for a delivery at some point, and scammers know it. The package delivery scam is one of the most common text-message frauds going, precisely because the story so often sounds plausible. Our GetMyPassword team explains how to spot a delivery scam and protect yourself.
How the scam works
You get a text or email that looks like it is from a courier or a big retailer, saying a package cannot be delivered until you confirm your address or pay a tiny “redelivery” or “customs” fee. The link leads to a convincing fake page that harvests your card details and personal information — or quietly tries to install malware. The fee is trivial on purpose, so the request feels too small to question.
Red flags to watch for
- An unexpected delivery you are not actually waiting for.
- A small fee to “release,” “redeliver” or clear “customs” on a package.
- Urgency — your parcel will be “returned” or “destroyed” unless you act now.
- A link to a site whose address is not the courier’s real domain.
- Requests for card details or a login on the page the link opens.
How to protect yourself
Never act from the message itself. Do not tap the link; instead open the courier’s official app or type its real website yourself and track the parcel with the number you were given when you ordered. Remember that couriers do not collect fees by random text, and a genuine carrier will not ask for your card details or password this way. If you are unsure, contact the seller or courier through their official channels.
A real courier wants to deliver your parcel, not collect a surprise fee by text. The moment a “delivery” message asks for a payment or your card details, it is a scam, not a shipment.
If you tapped the link
If you entered anything on the fake page, act fast. Contact your bank if you shared card details, and change the passwords for any accounts you may have exposed using our password generator, then turn on two-factor authentication. Watch your statements closely afterward — catching it early is what keeps a moment’s slip from becoming real loss.
Frequently asked questions
How do I spot a package delivery scam?
Watch for a text or email about an unexpected delivery that asks you to pay a small fee or confirm details through a link, with urgency and an address that is not the courier’s real site. Couriers do not collect fees by random text.
What happens if I click the link in a fake delivery text?
The link opens a fake page that tries to harvest your card details and personal information, or to install malware. If you entered anything, contact your bank, change exposed passwords, and turn on two-factor authentication.
How should I track a package safely?
Do not use links in messages. Open the courier’s official app or type its real website yourself and track with the number from your order confirmation. Contact the seller or courier through official channels if you are unsure.