Parcel Locker Phishing on Telegram
Scammers run automated Telegram bots that send fake parcel locker alerts, directing victims to phishing sites to pay fictitious fees or surrender login credentials.
Part of: Parcel Locker Phishing Scams
Last reviewed: 1 June 2026
Telegram's bot API makes it simple to run high-volume automated messaging campaigns. Parcel locker phishing operators exploit this by deploying bots that send thousands of delivery-failed notifications per hour, formatted to mimic messages from well-known locker networks.
Recipients who have previously received legitimate Telegram parcel notifications may not immediately question the format, especially if the bot account displays a recognisable logo and uses consistent branded language.
How this scam works on Telegram
A Telegram bot sends a message stating that a parcel is waiting in a locker and must be claimed within 48 hours. The message includes a 'Collect Now' button that opens an in-app browser directing to a phishing site. On the phishing site, the victim is asked for their home address, email, and card details to pay a small storage fee.
Some bots engage the victim in a scripted conversation — asking for their postcode first to appear to 'locate the nearest locker' — before presenting the payment request. This interactive step lowers suspicion by making the exchange feel personalised.
Telegram channels are also used to post fake tracking links that redirect to phishing pages when clicked from a mobile device.
Common red flags
- Telegram bot message about a parcel locker you did not sign up to receive notifications from
- 'Collect Now' button inside the message that opens an external site
- Request for card payment to release a parcel you were not expecting
- Bot account with no profile history or a very recently created username
- Phishing site URL visible in the browser address bar that differs from the official provider
- Interactive postcode step designed to make the scam feel personalised
How to protect yourself
- Never interact with Telegram bot delivery notifications unless you have actively opted in via a retailer
- Check delivery status through the retailer's official app rather than acting on Telegram links
- Review your Telegram privacy settings to limit who can send you messages
- Screenshot and report bots to Telegram using @notoscam or the in-app report feature
- Block the bot immediately after reporting
- Inform your bank if you entered card details on a linked site
How to report it
- Forward the message to Telegram's @notoscam bot and use the in-app 'Report' function
- Submit the phishing URL to your national cybersecurity agency's phishing reporting tool
- Alert your bank if payment details were entered
Frequently asked questions
Are all Telegram delivery notifications scams?
Not necessarily — some retailers and locker networks do use Telegram for genuine notifications. The key difference is that you will have actively opted in, and genuine messages will not ask for payment or full card details. When in doubt, ignore the Telegram message and check your order directly.