Common Package Delivery Scams and How to Spot Them
Delivery scam texts are among the most reported worldwide. Learn to identify fake DHL, FedEx, UPS, Royal Mail, SingPost, and Australia Post notifications before you click.
Fake delivery notification scams are the most reported scam type globally, consistently topping cybercrime reports in Singapore, the UK, Australia, the US, and across Europe. They work because online shopping is universal and people are always expecting packages. Here's everything you need to know to protect yourself.
Why delivery scams are so effective
Nearly everyone shops online. At any given time, most people either are expecting a delivery or recently received one. This means a delivery notification text has an extremely high chance of feeling relevant to the recipient — even if it's completely fabricated.
The scam is also designed to feel low-stakes. Being asked to pay a small customs fee or redelivery charge of $1-$3 doesn't trigger the same alarm bells as being asked for $500. But that small payment captures your full card details, which are then used for much larger charges.
The standard delivery scam text
The classic delivery scam text looks like this:
"Your parcel from [Amazon/Shopee/online order] could not be delivered due to incomplete address. Please update your delivery details and pay a $1.50 redelivery fee to reschedule: [link]"
Variations include:
- "Your package is being held at customs. A fee of $2.30 must be paid to release it."
- "We attempted delivery but no one was home. Click to reschedule."
- "Your parcel will be returned to sender in 24 hours unless you confirm your address."
The links go to convincing fake websites that mimic DHL, FedEx, UPS, Royal Mail, SingPost, Australia Post, or other couriers depending on your country.
What happens on the fake payment page
The fake site asks for:
- Your name and address (to make it feel real)
- Your delivery preference (creates engagement)
- Your full card details to "pay" the small fee
Once you enter your card number, expiry date, and CVV, the scammers have everything they need. The small fee may or may not actually be charged — either way, your card details are now in criminal hands.
More sophisticated versions also trigger a fake "verification" step that captures your bank's one-time password, giving them the ability to make larger transactions immediately.
How to verify a delivery notification legitimately
Step 1 — Do not click the link in the message
Step 2 — Find your tracking number — this should be in your original order confirmation email from the retailer
Step 3 — Go directly to the courier's official website by typing it into your browser:
- DHL:
dhl.com - FedEx:
fedex.com - UPS:
ups.com - Royal Mail:
royalmail.com - SingPost:
singpost.com
FAQ
Go directly to the courier's official website and enter your tracking number there. Never click links in SMS messages claiming to be from couriers.
The fee payment is the goal — it captures your card details which are then used for larger fraudulent charges. The small amount is just to lower your guard.
Possibly. Scammers purchase data from breaches. Personal details don't confirm legitimacy — always verify through official channels.