Fake Delivery Text Scams in Austria
Fraudulent SMS impersonating Österreichische Post and DHL Austria, directing Austrian residents to phishing pages that steal card data or banking credentials.
Part of: Fake Delivery Texts
Last reviewed: 1 June 2026
Austria's busy parcel sector — driven by strong online retail adoption — is exploited by delivery-phishing campaigns that impersonate Österreichische Post or private couriers. Victims receive SMS claiming a parcel requires a small EUR fee or address update before delivery, with a link to a fake but convincing portal.
The Austrian Post has publicly warned customers that it never sends payment requests by SMS. The national cybersecurity authority (CERT.at) monitors and publishes campaign alerts.
How this scam works on Austria
An SMS arrives in German from an apparent 'Post AG' sender: 'Ihr Paket konnte nicht zugestellt werden', with a link mimicking post.at. The page requests card details for a EUR 1–3 customs or redelivery fee.
Some variants prompt victims to log in with their Mein.Post account credentials, which attackers then use to monitor deliveries and intercept parcels. Others push Android users toward a fake 'Post AT' tracking app.
Campaigns peak around Christmas and Austrian public holidays.
Common red flags
- Unsolicited SMS about a parcel with a payment or login link — Österreichische Post does not send payment links by SMS
- Domain in the link is not post.at
- Mein.Post account login requested via an SMS link
- Request to install a tracking app from a link in a message
- SMS sender is a mobile number rather than a recognised short code
How to protect yourself
- Track parcels only at post.at typed directly — never via SMS links
- Never pay a delivery fee via a link in an unsolicited SMS
- Report suspicious SMS to CERT.at at cert.at/kontakt
- If card details were entered, cancel the card and alert your bank
- Install the official Österreichische Post app for legitimate parcel notifications
How to report it
- Report to CERT.at at cert.at/kontakt
- File a police report at bmi.gv.at/cyberpolizei
- Report directly to Österreichische Post at post.at so they can issue alerts
Frequently asked questions
Does Österreichische Post charge customs fees via SMS?
No. Any customs fees are noted on the parcel item itself or via official Post AG notification through registered mail or the Mein.Post app. SMS payment links are always fraudulent.