I got a text about a missed delivery with a QR code to reschedule — should I scan it?
Be cautious. Fake delivery notices using QR codes are a common quishing tactic, leading to phishing pages that ask for a small 'redelivery fee' along with your full card details, or to fake login pages.
Last reviewed: 5 July 2026
Explanation
This scam mimics the now-familiar pattern of real courier delivery notifications, which increasingly do include a link or code to reschedule a missed delivery, giving the fake version a plausible cover. The message claims a delivery attempt failed and provides a QR code to 'reschedule' or 'confirm your address,' leading to a page requesting a small payment, ostensibly for redelivery or a customs fee, alongside full card details including the security code.
Because the amount requested is often small, victims may not think carefully before paying, reasoning that even if something feels slightly off, the financial exposure seems minor. In reality, entering full card details on a fraudulent payment page can expose the card to further unauthorized charges beyond the small amount initially shown, and the scam may also be used to harvest personal information like your address and phone number for further targeting.
Genuine courier companies typically also allow you to check delivery status directly through their own official app or website using a tracking number, without requiring a QR code scan from an unsolicited text. Checking your delivery status independently, rather than scanning the code in the message, is the reliable way to confirm whether a rescheduling notice is real.
Common red flags
- Unsolicited text about a missed delivery includes a QR code rather than a standard tracking link
- Page reached after scanning asks for full card details including the security code for a small fee
- Courier name in the message doesn't match any delivery you're actually expecting
- Urgency to reschedule within a short window or the package will be 'returned'
- Sender's number or short code doesn't match the courier's known official contact
- Delivery status doesn't match anything visible when checked through the courier's actual official app
What to do now
- Check delivery status directly through the courier's official app or website rather than scanning the code
- Don't enter full card details, especially the security code, on a page reached through an unsolicited text
- Verify you're actually expecting a delivery from the courier named in the message
- Report the text as spam or phishing through your phone's reporting feature
- If you already entered card details, contact your bank immediately to flag potential fraud
- Delete the message and avoid forwarding the QR code to others
Frequently asked questions
Why do these scams ask for such a small payment amount?
A small amount lowers the victim's guard, since it seems like a minor risk even if something feels off, but entering full card details for any amount, however small, exposes the card to further unauthorized use.
How can I check a delivery notice is genuine?
Go to the courier's official app or website directly and enter your tracking number there, rather than using a link or QR code sent in an unsolicited text message.