Fake Customs Duty / Parcel Release Fee Scam
Fraudulent texts or emails claim a parcel is stuck in customs and demand a small 'release fee' by card, harvesting full payment details for later fraud.
Last reviewed: 5 July 2026
What this scam is
This scam exploits the fact that low-value customs and duty charges are a genuine part of some international deliveries, making a fake demand for a small fee highly believable. Scammers send a text message or email claiming a parcel is being held by customs, the postal service, or a courier pending payment of an outstanding duty, VAT, or handling charge, usually only a few pounds or dollars.
The message links to a convincing imitation of a postal service, customs authority, or courier website, often carrying the correct branding and a tracking number that appears to match a real order the recipient is expecting — either because the scammer bought leaked tracking data or simply because the message is sent widely enough that some recipients coincidentally have a parcel in transit. The low amount requested is deliberately calculated to bypass the scepticism that a larger sum would trigger.
The true objective is rarely the small fee itself. The payment form is built to capture full card details, and in more advanced versions, a follow-up step asks for a one-time SMS passcode under the guise of 'verifying' the payment, which lets the fraudster complete a much larger unauthorised transaction elsewhere.
How it works
The scam begins with a mass text or email blast referencing a customs hold, import duty, or handling fee, timed to coincide with periods when many people are expecting overseas parcels, such as after major shopping events. The message creates urgency by warning that the parcel will be returned to sender or destroyed if the fee is not paid within a short window, often 24 to 48 hours.
Clicking the link leads to a spoofed payment page mimicking the postal service or customs authority's branding, sometimes even copying a real tracking number format so it looks legitimate at a glance. The victim enters their card number, expiry date, and CVV to pay what appears to be a tiny fee, sometimes under five pounds or dollars.
Once the details are submitted, the scammer either uses the card immediately for a larger transaction, sells the harvested data to other criminals, or triggers a fake 'verification required' step that asks for a one-time passcode sent to the victim's phone — which, if entered, can authorise a much larger fraudulent charge in real time. The victim's actual parcel, if one exists, continues through normal delivery with no customs fee ever having been due.
Why this scam works
The scam succeeds because the request is small and plausible — many people have paid genuine customs charges before, so a message asking for a modest fee does not trigger the same alarm as a request for a large sum. The artificial deadline discourages the recipient from pausing to verify the claim through official channels.
Brand mimicry and the inclusion of what looks like a real tracking number lend a surface credibility that most recipients do not have the tools to independently check in the moment, especially on a mobile phone where spoofed websites are harder to scrutinise closely.
A typical pattern
A shopper who recently ordered a low-cost item from an overseas retailer receives a text message claiming their parcel is being held by customs and a small duty or handling fee must be paid before it can be released for delivery. The message includes a link that opens a page styled to look like the national postal service or customs authority, complete with a tracking number that matches a real shipment the shopper is expecting. The page asks for a payment of a few pounds or dollars by card to 'release' the parcel, and because the amount is trivial the shopper pays without much thought. The payment page then quietly captures the full card number, expiry date, and security code, and in some versions asks for a one-time passcode to 'verify' the cardholder. Days later the shopper notices unfamiliar subscription charges or larger unauthorised transactions on the same card, while the original parcel arrives normally through the post with no customs fee ever having been owed.
Common red flags
- Unsolicited text or email claims your parcel is held by customs
- A small fee is requested, typically only a few pounds or dollars
- The message includes a countdown or threat that the parcel will be returned or destroyed
- The link leads to a page that looks like a postal service but has a slightly wrong domain name
- You are asked for full card details plus a one-time passcode to 'verify' a tiny payment
- The tracking number in the message does not match any order you can find in your own account
- The sender number or email address does not match the postal service's official contact details
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Your parcel [tracking number] is being held at customs. A duty fee of [amount] is required for release: [link]
Action required: pay your outstanding customs charge within 24 hours or your parcel will be returned to sender.
We were unable to deliver your package due to an unpaid customs fee. Complete payment here to reschedule: [link]
To verify this transaction, please enter the one-time code just sent to your phone.
Common variations
- Fake email instead of SMS, styled as an official notice from a national postal service
- WhatsApp message claiming to be from a courier requiring a re-delivery and customs fee together
- Fake app download prompt bundled with the payment page to install malware alongside the scam
- Follow-up call from a fraudster posing as customer support to 'help' complete the payment
- Scam demands payment via a gift card or crypto QR code instead of a card form
How to verify before you act
Never click a link in an unsolicited text or email about a parcel. Instead, go directly to the postal service, courier, or customs authority's official website or app and check your parcel's status using the tracking number from your original purchase confirmation, not the one in the suspicious message.
Genuine customs or duty charges are typically invoiced by the courier directly, often after delivery or collection, and rarely require payment through a text-message link with a countdown deadline. If you are unsure, contact the retailer you ordered from or the courier's official customer service line using a number found independently, not one provided in the message.
Payment methods used
- Cryptocurrency
- Bank/wire transfer
- Gift cards
- Money transfer services
- Payment apps to 'friends & family'
Who is usually targeted
- Frequent online shoppers expecting international deliveries
- People shopping during high-volume periods such as major sales events
- Anyone who has recently ordered from an overseas retailer
What to do immediately
- Do not click any link in the message; delete or report it as spam
- Check your parcel status directly through the official courier or postal website
- If you already paid, contact your card issuer immediately to flag the transaction and consider cancelling the card
- Never share a one-time passcode you receive after making such a payment
- Change your online banking password if you entered details on the fake site
- Monitor your bank statements closely for several weeks for unfamiliar charges
How to prevent it
- Never click links in unsolicited texts or emails referencing parcels or customs fees
- Always check parcel status directly on the courier or postal service's official site or app
- Treat any message with an artificial countdown deadline as a red flag
- Use a virtual or single-use card number for online purchases where available to limit exposure
- Never enter a one-time passcode into a website unless you initiated the transaction yourself
- Enable transaction alerts on your bank cards to catch unauthorised charges quickly
- Report suspicious parcel-related texts to your mobile carrier and the impersonated postal service
Evidence to preserve
- The original text or email including sender number or address
- Screenshots of the fake payment page and any URL shown
- Bank or card statements showing the disputed charge
- Any confirmation or reference number the fake site generated
- Correspondence with your bank about the dispute
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
How do I know if a customs fee request is genuine?
Genuine customs or duty charges are usually collected by the courier at the point of delivery, invoiced by post, or shown directly in your account on the courier's official website. They are not typically demanded through an unsolicited text link with a strict deadline. If in doubt, check tracking directly on the courier's official site using your original order confirmation.
I paid a small customs fee through a text link — should I worry?
Yes. Contact your card issuer immediately, explain that you entered your card details on a suspicious site, and ask them to monitor or block the card. Even a tiny payment can mean your full card details are now in a scammer's hands, and any one-time passcode you entered afterward may have authorised a larger transaction.
Why do scammers ask for such a small amount of money?
A small fee feels low-risk and plausible, so victims are far less likely to pause and question it compared with a large payment request. The real goal is not the fee itself but harvesting working card details and, in some versions, a one-time passcode that can unlock much larger fraudulent transactions.