How do I protect myself from fake parcel delivery and courier scams?
Track any delivery through the carrier's official website using a tracking number you received from the sender — never pay a customs or re-delivery fee by clicking a link in an unexpected text message.
Last reviewed: 10 June 2026
Explanation
Smishing (SMS phishing) messages pretending to be from a delivery service are among the most prolific fraud attempts currently circulating. The typical format is a text claiming your parcel is on hold and requires a small customs payment or re-delivery fee to be released, with a link to a fake payment page that captures your card details. The charge is small enough to seem plausible, but the real goal is harvesting full card information for larger fraud.
The most important rule is to check delivery status only through the official carrier's website, using a tracking number you received from the actual sender when you placed an order. Go to the carrier's website directly — type it yourself — rather than clicking any link in a text or email. FedEx, UPS, Royal Mail, DHL, and USPS do not typically text you a payment link to release a parcel; any such text is highly likely to be fraudulent.
Customs charges on international deliveries are real, but they are handled at delivery by the carrier, not by a text message link. If a genuine customs charge is due, the carrier will either collect it at the door or send a formal notice by post. You can verify any claimed customs charge by calling the carrier's official customer service line.
Do not ignore these texts — report them. In the US, forward smishing texts to 7726 (SPAM), which is a carrier reporting service. In the UK, forward to 7726. Report delivery scam messages to the FTC. Clicking the link (without entering data) does not necessarily compromise you, but it does confirm your number is active and may increase smishing volume.
Common red flags
- Unexpected text about a parcel requiring a small fee payment via link
- Link in the text does not match the official carrier's domain
- Payment page in the link asks for full card number, expiry, and CVV
- You have not placed any recent international order but the text claims customs is due
- Text uses urgent language: 'parcel returned if not paid today'
- Tracking number in the text does not resolve on the official carrier's website
What to do now
- Do not click any link in an unexpected delivery-related text message
- Check your delivery status by going directly to the carrier's official website
- Forward smishing texts to 7726 (US and UK) to report them
- Report delivery scam texts to the FTC at ReportFraud.ftc.gov
- If you already entered card details, contact your bank immediately to report the potential fraud
Frequently asked questions
Are real customs charges collected via text message?
No. Legitimate customs charges are collected in person at delivery, by the carrier at the door, or via a formal written notice from the customs authority, not via a text message with a payment link. Any text asking for a customs or re-delivery fee via a link is a scam.
I clicked the link but did not enter any details. Am I safe?
In most cases, just visiting the page without entering information poses minimal risk, especially if your device is up to date. However, your phone number is confirmed active. Monitor your accounts for unusual activity and ensure your device software is current.