In this article
You get a text or email saying a parcel could not be delivered, or that a small customs or redelivery fee is due. The link leads to a page that looks like a courier or postal service and asks for your card details. The fee is tiny; the goal of a fake delivery message is your card data.
Warning signs
- You are not expecting a parcel, or the message does not name the shop or sender.
- The link does not go to the courier's official domain.
- A small, odd amount like 1.99 or 2.50 must be paid urgently.
- The page asks for full card details including the security code, or for a one-time code from your bank.
What to do
- Do not tap the link. Track the parcel on the courier's official site or in the shop's order page.
- If you entered card details, call your bank right away and block the card.
- Delete the message, and report it as spam in your messaging app.
More on reading links in our guide to checking a link before you click.
Real customs charges exist, but couriers explain them with your tracking number on their official website. Check there rather than paying through a link.
Frequently asked questions
Do couriers ask for fees by text message?
Real customs charges exist, but you can always see and pay them on the courier’s official website using your tracking number. Do not pay through a link in a text.
I entered my card on a fake delivery page. What now?
Call your bank straight away, block the card and check your recent payments.
