Fake Delivery Texts in Ireland: An Post and Courier Impersonation
Fraudsters send SMS and WhatsApp messages impersonating An Post and private couriers, directing Irish recipients to pay fake customs or redelivery fees on phishing websites that harvest card details.
Part of: Fake Delivery Texts
Last reviewed: 1 June 2026
Ireland's high e-commerce adoption rate and the prominence of An Post, DHL, and DPD as delivery carriers have made parcel-related phishing a persistent nuisance. Fraudsters send bulk SMS messages claiming a package is being held, with a link to a professional-looking clone of An Post or a courier's site.
The volume of genuine delivery notifications Irish consumers receive daily makes it easy for fraudulent messages to blend in. Victims who have recently ordered something online are particularly susceptible, as the timing feels plausible.
How this scam works on Ireland
The message typically reads: 'Your An Post parcel is awaiting customs clearance. A fee of €1.99 is due to release your package.' The link leads to a site mimicking An Post's design, asking for card details to process the nominal fee. In reality, the site captures the full card number, expiry date, and CVV, which are used for larger unauthorised transactions.
Variants impersonate DHL, DPD, or Fastway with very similar templates. Some messages are sent via WhatsApp rather than SMS, and some display the sender name as 'An Post' using number spoofing, making them appear in the same thread as legitimate An Post notifications.
The fake sites often have SSL certificates (displaying the padlock icon), which many consumers mistakenly believe guarantees legitimacy.
Common red flags
- Unexpected SMS or WhatsApp about a parcel you do not recognise ordering
- Small fee requested (under €5) to release a package — a classic baiting amount
- Link does not go to anpost.com or the official courier domain
- Site asks for full card number and CVV for a minor customs or redelivery charge
- Message contains spelling errors or unusual phrasing not typical of official communications
- Padlock (SSL) on the fake site — this confirms encryption, not legitimacy
How to protect yourself
- Track parcels only through the official An Post app or by typing the courier URL directly in your browser
- Never click links in unsolicited SMS or WhatsApp messages — navigate to the carrier site manually
- Verify tracking numbers at anpost.com or the courier site without using the message link
- Use a virtual card with a low limit for any legitimate low-value online fees
- Enable transaction alerts on your bank card to catch unauthorised use immediately
- Report the phishing URL to An Post or the courier, and to the Garda National Cyber Crime Bureau
How to report it
- Forward the fraudulent SMS to 7726 (SPAM) to report to your mobile carrier
- Report to the Garda National Cyber Crime Bureau via garda.ie
- Report phishing to An Post at [email protected] and to the relevant courier's official security team
Frequently asked questions
How do I tell a real An Post message from a fake one?
Genuine An Post notifications link only to anpost.com. You can verify by going directly to anpost.com and entering your tracking number there. An Post will never ask for card payment via an unsolicited SMS — any customs fee would be communicated through official channels.