Fake Delivery Texts in Indonesia
SMS and WhatsApp phishing messages impersonating Indonesian couriers JNE, J&T, or SiCepat to harvest mobile banking credentials or collect fake delivery fees.
Part of: Fake Delivery Texts
Last reviewed: 1 June 2026
Indonesia's enormous parcel delivery ecosystem — handling millions of shipments daily through JNE, J&T Express, SiCepat, AnterAja, and Pos Indonesia — provides ideal camouflage for fake delivery text fraud. Indonesians awaiting Shopee, Tokopedia, or direct e-commerce orders receive fraudulent tracking notifications that harvest banking credentials or prompt malicious APK installation.
The fraud is especially effective because Indonesians receive multiple genuine delivery notifications daily, lowering vigilance and increasing the likelihood that a fake one goes unnoticed until it is too late.
How this scam works on Indonesia
A victim receives an SMS or WhatsApp message claiming their J&T or JNE package is held due to an incorrect address or unpaid customs charge. The link leads to a page styled as the courier's official site, requesting login credentials for bank apps or prompting download of a 'courier tracking app' APK that is banking malware.
A simple cash variant requests a small Rp[amount] fee via GoPay, OVO, or bank transfer to release the parcel — small enough that many recipients pay without thought, generating significant revenue at scale.
Indonesia's Android-dominant device market and the prevalence of banking trojan families specifically targeting Indonesian bank apps (BCA, BRI, Mandiri, BNI) make the credential-harvesting variants particularly dangerous.
Common red flags
- Delivery notification about a parcel you do not recognize
- Link domain does not match the official courier site (e.g., jne.co.id, jet.co.id)
- Request to install an APK file outside of Google Play
- Small GoPay or bank transfer fee requested before delivery can proceed
- Urgency claiming the package will be returned if not claimed within 24 hours
How to protect yourself
- Track packages only through official courier apps or websites — not links in messages
- Never install APK files from links received via SMS or WhatsApp
- Enable transaction notifications on all Indonesian bank and e-wallet apps
- Indonesian couriers do not collect unpaid fees via external links — pay only at official pickup points
- Keep Android OS and banking apps updated with latest security patches
How to report it
- Report phishing links to Kominfo at aduankonten.id
- Notify the impersonated courier (JNE, J&T, SiCepat) directly through their official channels
- File at Bareskrim's patrolisiber.id for criminal aspects
Frequently asked questions
Do Indonesian couriers ever request fees via SMS link or mobile transfer?
No. JNE, J&T, SiCepat, and other Indonesian couriers handle any outstanding fees through established processes at pickup points or through their official apps. Any SMS or WhatsApp link requesting payment before delivery is fraudulent.