Transport and Communications Agency

Parcel delivery scams – how to recognise a scam and what to do

You receive a text message or email about a parcel, shipment or delivery and are asked to open a link or provide information. The message may be a scam.

On this page

This page explains how to recognise a parcel delivery scam and what to do if you opened a link or provided your information.

How to recognise a parcel delivery scam

Scammers send text messages and sometimes instant messages that appear to come from a delivery company or another delivery service. The message may refer to a parcel waiting for you, a missing payment or a delayed delivery.

The aim is to get you to open a link and provide information or install a malicious app.

The scam may be carried out in the name of any delivery company.

How can you recognise a scam?

A scam message may, for example:

  • claim that a payment for your parcel is missing 
  • ask you to confirm the delivery 
  • ask you to retrieve a parcel code 
  • ask you to update the delivery details 
  • direct you to download an app 
  • ask you to log in using your online banking credentials 
  • ask for your payment card details 
  • ask for personal information 

Scammers try to create a sense of urgency so that you act quickly.

What to do if you receive a suspicious message

Do not click the link

If you are not sure whether the message is genuine, do not click the link in it.

If you are expecting a delivery, check its details in the delivery company’s own app or by typing the service address into your browser yourself.

Check the website address

A scam website may look genuine, but its web address will be different from the service’s official address.

Do not rely on the appearance of the website alone.

Do not provide your information

Do not enter any of the following on a suspicious website:

  • online banking credentials 
  • payment card details 
  • passwords 
  • personal information 
  • authentication codes sent by text message

If you provided your information

If you provided your online banking credentials or card details

  • Contact your bank immediately.
  • Ask the bank to block your credentials or payment card if necessary.

If you provided your password

  • Change the password immediately.
  • If you use the same password for other services, change it there too.
  • Enable multi-factor authentication.

If you installed an app

  • Disconnect the device from the internet.
  • Remove the malicious app if possible.
  • If you suspect malware and cannot make sure that the device is secure, reset the device to its factory settings and set it up again.
  • If necessary, contact the device manufacturer’s support service or an IT professional for help.

Why do these scams work?

A scam message may seem convincing because:

  • you really are expecting a parcel 
  • the message appears to come from a well-known company 
  • the scam website looks similar to the genuine service 
  • the message creates a sense of urgency 

A familiar company name or logo alone does not mean that the message is genuine.

Protect your information

You can reduce the risk of falling victim to a scam by:

  • using multi-factor authentication 
  • using a different password for each service 
  • keeping your phone’s operating system up to date 
  • installing apps only from official app stores 
  • always checking delivery details in the service’s own app or on its website

Frequently asked questions

Yes. Scammers send messages to large numbers of people precisely because some of the recipients will be expecting a delivery.

Yes. The sender name can be spoofed, and scam messages can also appear in the same message thread as genuine messages. Always check the content of the message before acting on it.

In most cases, simply opening a link is not enough to cause harm, but you should not enter any information on the website or download any apps from it.

Check the full web address in your browser’s address bar. If you are unsure, close the page and go to the service by typing its address into your browser yourself or by using the service’s own app.

Page was last updated