Fake Delivery Texts in Luxembourg
Parcel-delivery phishing SMS campaigns target Luxembourg residents by impersonating Post Luxembourg, DHL, and UPS with fake customs-fee links.
Part of: Fake Delivery Texts
Last reviewed: 1 June 2026
Luxembourg's high online-shopping penetration and cross-border commerce make its residents frequent targets of fake delivery SMS scams. Fraudulent messages impersonating Post Luxembourg (Post.lu), DHL, UPS, or Amazon Logistics claim that a parcel is held pending a small customs fee or address confirmation. The link leads to a phishing page designed to harvest payment card details.
The scams are particularly convincing in Luxembourg because a significant proportion of parcels do genuinely arrive from abroad — with customs processing common for items from the UK post-Brexit or from non-EU countries — giving the fee-request narrative a veneer of plausibility.
How this scam works on Luxembourg
An SMS arrives in French, German, English, or Luxembourgish claiming a parcel for the recipient is held at a Post Luxembourg sorting centre or customs facility. A link to 'pay the customs fee' (typically a few euros) leads to a fake page mimicking Post Luxembourg or the carrier's website.
On the fake site, victims enter full credit card details to pay the nominal fee. These details are captured and used for fraudulent transactions or sold on. In some variants, the link triggers malware installation on Android devices.
The timing often coincides with peak shopping periods (Black Friday, Christmas) when recipients are most likely to be expecting parcels.
Common red flags
- An SMS requests payment via a link for a parcel you are not certain you are expecting.
- The link URL does not match the official domain of Post Luxembourg (post.lu) or the named carrier.
- The fee is tiny — typically under €5 — designed to seem trivial.
- The website asks for full card details rather than redirecting to a secure payment provider.
- The SMS comes from a mobile number rather than an official short code.
How to protect yourself
- Track parcels directly through the carrier's official app or website — never through links in SMS messages.
- Real customs fees from Post Luxembourg are notified through official Post channels with a reference number.
- Report the SMS to Post Luxembourg via its official fraud-reporting contact.
- If you entered card details, contact your bank immediately to freeze the card.
- Enable transaction alerts on your card to detect fraud rapidly.
How to report it
- Forward the SMS to Post Luxembourg's fraud team and to the CIRCL (Computer Incident Response Centre Luxembourg) at [email protected].
- Report to Luxembourg Police if card details were compromised.
- Contact your bank to freeze affected cards and dispute fraudulent transactions.
Frequently asked questions
Does Post Luxembourg charge customs fees by SMS?
No. Post Luxembourg's customs fee notifications are provided through official tracked-parcel notifications with a formal reference. Any SMS with a payment link is fraudulent.