Fake 'Package Undeliverable' Email Script
This phishing email impersonates a courier or postal service, claiming a package could not be delivered and asking you to confirm your address or pay a small redelivery fee through a link. Because so many people are expecting deliveries at any time, the scenario feels plausible and the fee seems too small to worry about, which is exactly the point. It lowers your guard while a fake payment page harvests your card details and address; some emails also carry malicious attachments. The most important step is to check delivery status only through the courier's official app.
Last reviewed: 1 June 2026
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
[Courier]: We were unable to deliver your package [tracking number]. Reschedule your delivery and pay [amount] redelivery fee: [fake link]
Your parcel is being held at our depot. Confirm your address within 48h to avoid return to sender: [fake link]
Important: a package addressed to you requires customs clearance of [amount]. Pay now to release: [fake link]
[Postal service]: Delivery attempted for package [tracking number]. Update your delivery preferences: [fake link]
Final notice: your item will be returned unless you pay the [amount] storage fee by [date]: [fake link]
What the scammer wants
To use a believable delivery scenario to make you enter card and address details on a fake page, either for fraud or to charge a small fee at scale across thousands of recipients.
Red flags in the message
- Email about a parcel you do not recognise ordering
- Redelivery or customs fee required via a link in the email
- Link leads to a domain that is not the official carrier's website
- Tracking number returns no results on the real carrier's site
- Tight deadline to confirm or the parcel is returned
- Page requests full card details to pay a minor fee
- Sender email address does not match the courier's real domain
- No reference to which order or sender the parcel is from
A safe response
Do not click. Check your orders and any expected deliveries directly in the carrier's official app or website using the tracking number from your original order confirmation. Real carriers do not request card details via email links for routine redelivery.
What not to send
- Card or bank details via any link in a delivery email
- Personal address details on an unverified page
- Any redelivery or customs fee via an email link
What to do if you already replied
- If you entered card details, contact your bank immediately to cancel the card
- Monitor your account for unauthorised charges
- Change any passwords reused on the fake page
- Report the phishing email to the real courier and your national cybercrime body
- Check for other accounts linked to the email address provided
Evidence to preserve
- Screenshot the full message or call details
- Note the sender number, email, or profile
- Save any links (without clicking) and payment details
- Record dates and times
Frequently asked questions
I am actually expecting a package right now — could this be real?
Even if you're expecting a delivery, don't assume the email is genuine — check your order or tracking status directly through the retailer's or courier's official app or website rather than clicking the email's link. Coincidental timing is exactly what makes these emails effective.
I paid the small redelivery fee — is that a big deal?
Yes — the page likely captured your full card number, expiry, and security code, which can be used for further fraud beyond the small charge you saw. Contact your card issuer to flag possible fraud and watch your statement for additional unauthorized transactions.
The email had an attachment labeled as a shipping label — is it safe to open?
No — treat unexpected attachments from delivery emails as potentially malicious, since they can install malware when opened. Delete the email without opening the attachment and verify any real delivery issue through the courier's official channels.
How do I check if a package is genuinely undeliverable?
Log into the courier's official app or website directly, or use the tracking number from your original order confirmation, rather than any link or number provided in an unsolicited email or text.