Is a text message saying my parcel is held and I need to pay a fee a scam?
Almost certainly yes. Legitimate couriers do not send unsolicited texts demanding payment to release a package, and this is one of the most common smishing (SMS phishing) scams in circulation.
Last reviewed: 10 June 2026
Explanation
Parcel-holding texts typically claim to be from a well-known courier — UPS, FedEx, Royal Mail, DHL, or a national postal service — and say your delivery is suspended due to an unpaid customs fee, re-delivery charge, or address correction. The fee is usually a small amount, typically under $5, designed to seem plausible and to lower your guard.
Clicking the link takes you to a convincing counterfeit website that harvests your payment card details. The real danger is not the small fee but the card number you hand over, which is then used for much larger unauthorised charges. Some versions also install malware on Android devices.
Legitimate couriers handle customs fees through the official import process and send invoices by post or through their official app. They do not text random links requiring immediate card payment. If you are expecting a genuine delivery, go directly to the courier's official website — type the address yourself — and track the parcel using your reference number.
If you have already entered card details, contact your bank immediately to report the transaction as fraud and request a card replacement. Most banks will refund unauthorised charges when reported promptly.
Common red flags
- Text arrives from a random mobile number or shortcode, not an official company sender ID
- The link uses a suspicious domain that is not the courier's official website
- You are not actually expecting any delivery
- The fee amount is suspiciously small to seem trivial
- The message creates urgency such as 'collect within 24 hours or it is returned'
- The payment page asks for your full card number, expiry, and CVV
What to do now
- Do not click the link or enter any payment details
- If you are expecting a parcel, track it directly on the courier's official website
- Forward the text to your national scam-reporting SMS line (e.g. 7726 in the UK and US)
- Block the sending number on your phone
- If you already entered card details, call your bank's fraud line immediately
- Report the scam text to your national consumer protection agency
Frequently asked questions
What if I already clicked the link but did not pay?
You may still be at risk if the site attempted to install malware. Run a security scan on your device, clear your browser cache, and monitor your accounts for unusual activity.
Can these texts be reported to the courier named in the message?
Yes. Most major couriers have a dedicated phishing report email address, such as [email protected]. Reporting helps them pursue takedowns of fake sites.
Why is the fee always so small?
A tiny fee reduces suspicion and increases the chance you will enter your real card details. The fraudsters then use those details for much larger purchases elsewhere.