In this guide 10 sections
At a glance
The short version.
Watch for
- An unexpected text with a shortened, misspelled or unfamiliar link
- A small redelivery, customs, address-correction or unpaid-postage fee
- A threat that the parcel will be destroyed or returned immediately
Already acted?
Contact the card issuer immediately if card details were entered.
See every recovery stepWhat is changing now
The current pattern.
Delivery smishing remains a common text-message lure. The message may mention unpaid postage, an incomplete address, a missed delivery or a final chance to reschedule. The small fee makes the page feel low risk while the form collects much more valuable information.
How it works
How the scam unfolds.
Scammers send large numbers of messages because many recipients are expecting a parcel. The timing does not need to be precise: normal online shopping makes the story relevant to a wide audience.
The link opens a look-alike carrier or postal page and asks for an address, card details or an account sign-in. Some pages add a countdown or claim the parcel will be returned. Information entered into the form can be used for unauthorised payments, identity fraud or more convincing follow-up calls.
The real question is not whether you expect a parcel. It is whether the delivery can be confirmed independently through the retailer, a known tracking number or the carrier’s official service.
Warning signs
Reasons to stop and verify.
- An unexpected text with a shortened, misspelled or unfamiliar link
- A small redelivery, customs, address-correction or unpaid-postage fee
- A threat that the parcel will be destroyed or returned immediately
- A request for card details before showing verifiable tracking information
- A generic greeting with no retailer, order number or recognisable shipment
- A sender that asks you to reply or move to a different messaging app
Spot the signs
What it can look like.
Highlighted phrases are warning signs; the numbered notes explain each one.
+44 7700 9003821 (warning sign 1)
Parcelwise: Your parcel is on hold due to an incomplete address.2 (warning sign 2) A £1.45 redelivery fee is required.3 (warning sign 3)
Update your details within 12 hours4 (warning sign 4) or the item will be returned to sender: parcelwise-redelivery.example/uk5 (warning sign 5)
- An ordinary mobile number
Delivery companies commonly send updates from a recognised name or short code. A personal mobile number is a warning sign — although a familiar sender name can be faked too.
- A vague problem
No order number, retailer or tracking reference. The message works on anyone who happens to be expecting any parcel.
- A tiny fee
The amount is low enough that paying feels harmless. The form behind it asks for full card details, which are worth far more.
- A deadline
The 12-hour limit discourages you from checking the order yourself first.
- A look-alike web address
The carrier’s name sits inside a different domain. Anyone can register a name like this.
Start from what you know: the order confirmation in your email or the retailer’s app. It names the real carrier and tracking number.
Composite example: names, numbers and “.example” addresses are fictional.
Worked example
A realistic pattern, separated into evidence.
This composite example is educational. It does not describe a real person or reproduce a live malicious message.
A small redelivery fee hides a larger collection form
- 01The opening
A text says a parcel could not be delivered because the address is incomplete. The recipient is expecting an order, and the message asks for only €1.99 to schedule another attempt.
- 02The escalation
The linked page copies a carrier’s colours and first asks for the address, then full card details and a one-time banking code. A timer warns that the parcel will be returned today.
- 03The decision point
Expecting a parcel explains why the message feels relevant; it does not connect the sender to the real order. The unverified link, tiny fee and expanding request for data form the scam pattern.
Independent verification
Test the request without using its evidence.
These checks deliberately move the decision away from the person, link, number or account that introduced the request.
- 01
Start with the purchase record
Open the retailer account or original order confirmation. Identify the carrier and tracking number without using information from the text.
- 02
Use the carrier’s known service
Type the official address or use its app. A real delivery event should be visible against the known tracking number.
- 03
Compare the requested information
A request that expands from a delivery detail to full card data, credentials or an approval code is not a routine tracking update.
- 04
Treat timing as unverified
A coincidental message can arrive while you are expecting a parcel. Timing alone does not prove that the sender has access to the order.
Prevention
Make the next attempt harder.
- 01
Track from the order, not the message
Make it a habit to check deliveries only through the retailer’s account or the carrier’s app, using the tracking number from your order confirmation.
- 02
Filter unknown senders
Most phones can move messages from unknown senders into a separate list and report junk. Turning this on reduces how often a scam text reaches your main inbox.
- 03
Use card alerts for online shopping
Instant card notifications — or a separate card with a low limit for online purchases, where your bank offers one — reveal misuse quickly and limit the damage.
- 04
Know your usual carriers
Notice which carriers your regular retailers use. A message from a company that is not handling any of your orders is easier to dismiss.
If you already acted
Protect access and contact the real provider.
- Contact the card issuer immediately if card details were entered.
- Change any reused or submitted password through the real service.
- Watch for follow-up calls that reference the information entered on the fake page.
- Review statements and account alerts rather than waiting for a visible fraudulent charge.
- Report the fake message to the carrier or postal service using its official website.
Common questions
Short answers to real doubts.
I entered my card details but the payment failed. Am I safe?
Not necessarily. The page may have been built to collect details rather than take the fee. Contact your card issuer using the number on your card, explain what happened and ask whether the card should be cancelled. Watch for follow-up calls or messages that mention the fake page.
How do real delivery companies contact people?
Practices vary by country and carrier. Many send updates by email or text that include a reference you can match to your order, and many offer an app. Whatever a message says, you can check the parcel yourself by entering the tracking number from your order confirmation on the carrier’s official site.
Should I reply STOP to a scam text?
It is safer not to reply at all. A reply confirms the number is active and can lead to more messages. Use your phone’s report-junk option or, where the service is supported, forward the message to 7726, then delete it.
Sources
Official guidance used for this article.
Stop & Verify summarises these sources for general education. Reporting routes and legal protections vary by location.