Fake Delivery Texts in Thailand
SMS and Line phishing messages impersonating Thai couriers like Kerry Express, Flash Express, or Thailand Post to harvest banking credentials.
Part of: Fake Delivery Texts
Last reviewed: 1 June 2026
Thailand's booming e-commerce sector — dominated by Shopee Thailand, Lazada, and direct social commerce on Facebook and TikTok Shop — has generated enormous parcel delivery volumes, creating ideal conditions for fake delivery text scams. Thai users receive fraudulent SMS or Line messages impersonating major couriers with links to phishing pages or malicious APK files.
The scam peaks around Thai shopping events: 11.11, 12.12, and Songkran season promotions, when consumers are actively awaiting multiple deliveries.
How this scam works on Thailand
A victim receives an SMS claiming their Kerry Express or Thailand Post package cannot be delivered due to an incorrect address or required customs payment. The link leads to a page styled as the courier's official site, asking the victim to confirm their address and enter bank account or PromptPay details.
Line-based variants impersonate official courier Line Official Accounts (OA). The fake OA sends a message with a link to update delivery information, which either harvests credentials or prompts installation of a fake courier app containing banking malware targeting Thai financial apps.
Thailand's high adoption of PromptPay (Thailand's instant payment system) means that credential theft translates rapidly into financial loss, as fraudsters use harvested details to initiate unauthorized PromptPay transfers.
Common red flags
- SMS or Line message about a parcel you do not recognize ordering
- Link domain does not match the official courier URL (e.g., kerryexpress.com, thailandpost.th)
- Request to pay a customs or redelivery fee via PromptPay or bank transfer through a link
- Prompt to install an APK file from a link rather than from the official app store
- Urgency language claiming the package will be returned if action is not taken within hours
- Line Official Account with a name similar but not identical to the legitimate courier OA
How to protect yourself
- Track parcels only through the official courier website or verified app from the app store
- Never install APK files from links received via SMS or Line
- Enable PromptPay transaction notifications to detect unauthorized transfers immediately
- Report suspicious Line OA accounts through Line's reporting function
- Check the courier's official Line OA verified badge (blue checkmark) before interacting
How to report it
- Report to Thailand's ETDA (Electronic Transactions Development Agency) at etda.or.th
- File with the AOC hotline 1441
- Report phishing Line accounts through the Line app's official reporting feature
Frequently asked questions
How can I tell if a Line Official Account belongs to a real Thai courier?
Verified Thai business Line Official Accounts display a blue shield checkmark (盾) next to their name. Always search for the courier brand name in Line's search to find the official OA, rather than following links in messages. Kerry Express, Flash Express, and Thailand Post all maintain official verified OAs.