Recover After a Fake Toll or Delivery Text Scam
Fake toll notices and parcel delivery texts are a common phishing method. Here's what to do if you were caught out.
Last reviewed: 1 June 2026
First 10 minutes
- If you entered card details, call your bank immediately and ask them to block the card
- If you entered login credentials for another service, change that password now
- Do not click the link again or respond to follow-up texts
- Screenshot the original text and the website URL as evidence
- Note what personal or payment information you entered
First 24 hours
- Monitor your bank account and card statements for unauthorised charges
- Report the fake website to your national cyber/fraud reporting service
- Forward the suspicious text to your mobile carrier's spam reporting number (e.g. 7726 in the UK and US)
- If you entered your address or personal details, watch for follow-up phishing or identity misuse
- Check whether the same card or credentials are used elsewhere and update them
Contact your bank or payment provider
- Call your bank using the number on your card and report the card details as potentially compromised
- Ask for a replacement card and dispute any fraudulent charges
- Ask about adding extra monitoring to your account
Evidence to preserve
- Screenshot the original text message including the sender number and link
- Copy the full URL of the fake site (do not click it again — just note what you remember)
- Record what information you entered on the page
- Save any confirmation messages or order references the fake site sent you
Secure your accounts and devices
- Block the sender number on your phone
- Remove any payment details saved on browsers or devices that were used
- Enable transaction alerts on your bank account
- Be cautious of follow-up calls or texts claiming to resolve the issue
Report it
- Report the phishing site to your national fraud/cyber service
- Forward the text to 7726 (UK/US) to report to your mobile carrier
- Report to the real toll operator or delivery company being impersonated
- Keep all reference numbers
Smishing — phishing by SMS — is widespread, and fake toll, parcel, and delivery texts are among the most common types. They create a sense of urgency ('your parcel is held', 'outstanding toll balance') and direct victims to convincing fake payment pages.
If you entered card or personal details, the priority is the same as any card compromise: contact your bank immediately. If you only clicked the link and looked at the page without entering anything, the risk is lower, but monitor your accounts and report the site.
Real toll operators and parcel couriers do not request card payment by text with links to unknown websites. When in doubt, log in directly to the courier's or toll authority's official website to check for genuine notices.
Frequently asked questions
I received a fake delivery text but did not click it — do I need to do anything?
You are safe if you did not interact. You can report the number and text to 7726 (UK/US) to help block it for others, then delete the message.
The fake site charged me a small amount — is that all?
Not necessarily. Small initial charges are sometimes used to verify a card is active before larger fraudulent charges follow. Block and replace the card regardless of the amount.
How can I tell a fake delivery text from a real one?
Check the sender number (real couriers use official short codes or known numbers), hover over or carefully inspect any link before clicking, and go directly to the courier's app or website instead of using the link in the text.
I shared my home address on the fake page — should I be worried?
Your address is lower risk than card or login details, but it can be used in targeted follow-up scams or identity fraud. Monitor for unexpected post and be alert to unsolicited calls or texts claiming to be from any company you gave it to.