Fake Delivery Text Scams in Kenya
How fraudulent SMS and WhatsApp delivery notifications phish Kenyan recipients for M-Pesa payments and personal data.
Part of: Fake Delivery Texts
Last reviewed: 1 June 2026
Fake delivery notifications are an increasingly common phishing vector in Kenya, exploiting the growth of e-commerce and the routine expectation of package deliveries. Recipients receive SMS or WhatsApp messages claiming a parcel is held at a courier facility and that a small clearance or redelivery fee must be paid via M-Pesa to release it.
The messages mimic real courier services such as DHL, G4S, or Posta Kenya, and the urgency framing — 'parcel returns in 24 hours unless fee paid' — pushes recipients to act before verifying. Even people who are not expecting a parcel sometimes pay, worried they may have forgotten an order.
How this scam works on Kenya
Fraudulent delivery notifications in Kenya are sent in bulk via SMS gateways or WhatsApp broadcast, often targeting phone numbers harvested from shopping app databases or online classifieds. The message includes a fake tracking number and a payment prompt directing the recipient to send a modest amount to an M-Pesa number or Paybill.
Some variants include a shortened URL leading to a phishing page styled as a courier website where the recipient enters card or M-Pesa credentials directly. Others simply collect the M-Pesa payment directly — small enough per victim that many recipients do not bother reporting.
At scale, these campaigns extract significant revenue from many small individual payments and also harvest login credentials for online shopping accounts.
Common red flags
- Delivery notification from a service you do not remember ordering from
- Fee demanded to release or redeliver a parcel via M-Pesa payment to an unverified number
- Message uses a shortened URL instead of the courier's official domain
- Tracking number does not appear on the courier's official website
- Message arrives from a private WhatsApp number, not a verified business sender ID
How to protect yourself
- Always verify delivery notifications by going directly to the official courier website and entering the tracking number
- Never click shortened URLs in delivery-related SMS messages
- Legitimate Kenyan couriers use official Paybill numbers listed on their websites — verify before paying
- If you receive a suspicious message, call the courier's official customer service number to confirm
How to report it
- Report the M-Pesa recipient number to Safaricom's fraud team immediately
- Report the fake sender ID to the Communications Authority of Kenya (CA) which regulates SMS sender registrations
- Forward scam messages to the DCI Cybercrime Unit as part of bulk fraud reporting
Frequently asked questions
How do I check if a Kenyan courier delivery message is real?
Go directly to the official courier website (e.g., dhl.com, postakenya.co.ke) and enter the tracking number provided. Never trust the link in the message itself. Official Kenyan couriers list their verified M-Pesa Paybill numbers on their websites — compare these against any payment request before sending money.