Fake Delivery Text Scams in Belgium
Fraudulent SMS impersonating bpost and DHL Belgium, directing Belgian residents to phishing pages that steal itsme credentials or card data.
Part of: Fake Delivery Texts
Last reviewed: 1 June 2026
Belgium's high parcel volumes and the central role of itsme in digital authentication combine to make fake delivery SMS an effective fraud vector. Scammers impersonate bpost (the Belgian national postal service), claiming a parcel is held and a small EUR fee must be paid or delivery details updated via a link.
CCB's safeonweb.be platform and bpost itself regularly warn Belgian consumers about delivery-phishing waves. Victims who enter itsme credentials on fake portals may find their identity used to authorise banking transactions.
How this scam works on Belgium
An SMS arrives from an apparent 'bpost' sender claiming 'Uw pakket kon niet worden afgeleverd' (Dutch) or 'Votre colis n'a pas pu être livré' (French), with a link to a fake bpost.be lookalike. The page requests itsme login or card details for a EUR 1–3 redelivery fee.
Some campaigns ask for full card number, expiry, and CVV under the guise of scheduling redelivery. Others prompt installation of a 'bpost tracking app' from a third-party host.
Campaigns intensify around Christmas and Belgian national holidays when genuine bpost volume is highest.
Common red flags
- Unsolicited SMS about a parcel with a payment link — bpost does not request payments via SMS links
- Domain in the link is not bpost.be
- itsme login requested on a page reached via an SMS link
- Request to install a tracking app from a link
- Both Dutch and French text appear together but the translation quality is inconsistent
How to protect yourself
- Track parcels only at bpost.be typed directly — never via SMS links
- Never pay a delivery fee via a link in an unsolicited message
- Forward suspicious SMS to [email protected] or report via the safeonweb app
- If itsme or card details were entered, contact your bank immediately and revoke itsme access
- Enable bpost MyPost24 notifications via the official bpost app
How to report it
- Forward the suspicious SMS or email to [email protected]
- Report to police.be if money was lost
- Report via safeonweb.be portal maintained by CCB
Frequently asked questions
I entered my itsme login on a fake bpost page — what should I do immediately?
Contact itsme support and your bank right away to flag potential compromise, and change any related passwords from a trusted device. Report the phishing site to [email protected] as well.
How can I tell a real bpost delivery notification from a fake one?
Genuine bpost updates come through the official MyPost24 app or by checking bpost.be directly — bpost does not request payment or itsme login through SMS links. Treat any such link with suspicion.
Why do these fake bpost messages sometimes appear in both French and Dutch?
Scammers targeting Belgium often send bilingual messages to reach both language communities at once, and the inconsistent translation quality between the two versions can itself be a telltale sign of fraud.
Can bpost track scam messages sent in its name?
bpost has a dedicated fraud-reporting channel and cooperates with CCB. Reporting fake messages helps bpost issue public warnings and assist investigators.