By Moti Shay · updated July 25, 2026
This is one of the most common text scams worldwide: a message posing as the post office, DHL, or a courier says a parcel is held and asks for a small "customs fee" or "redelivery fee" via a link. The amount is tiny — a dollar or two — precisely so you pay without thinking. But the goal isn't that couple of dollars: it's your full card details.
The classic variants, always with a link: • "Post: your parcel is awaiting delivery. Please pay the customs fee ($1.99): [link]" • "We couldn't deliver your parcel — incomplete address. Update your details within 24h: [link]" • "DHL: clearance fee required before shipping: [link]" The link leads to a page that perfectly mimics the official site — logo, colours, a fake tracking number. You're asked for your address (to look credible), then your card. The moment you confirm, the scammers have the number, expiry and CVV — and charge far more than $1.99.
Three triggers: almost everyone is genuinely waiting for a parcel (Amazon, resale apps, AliExpress…); the amount is too small to raise suspicion; and the countdown ("within 24h it returns to sender") pushes you to act fast. Acting fast is exactly what the scammers want.
• The link isn't the official domain but a strange address, a shortened link (bit.ly…), or an odd domain (.xyz, .top, .icu) • A customs fee of a dollar or two — real customs charges never arrive this way • Urgency: "within 24 hours," "final notice" • The sender is an ordinary mobile number or an international one • No verifiable tracking number — or one that doesn't exist on the official site • Typos or awkward phrasing
Never use the link in the text. Instead: 1. Open the official site or app yourself (post office, courier…). 2. Enter the tracking number the shop gave you — not the one in the text. 3. If there's a genuine fee, it'll appear there, with an official payment after you log in. Nothing on the official site? The text is a scam. Delete it and block the number.
Copy the whole message (long-press → copy) and paste it into the free Phishy checker on this page. The tool follows the link to its real destination — even hidden behind a shortener — checks it against global scam-site databases, and analyses the message text. Verdict in seconds: safe, suspicious or phishing. Free, no signup.
1. Block the card immediately (number on the back of the card). 2. Review recent transactions and dispute any charge you don't recognise with your bank — fraud protection usually applies. 3. Report the number to your national fraud/spam-text service. 4. Report the fake page to your national cybercrime portal. 5. Keep screenshots of the text and the site — useful for the bank and the report.
Real fees are paid on the official site or app, after you log in, with a verifiable tracking number — never via a direct link in a text with a $1-2 amount.
It's the opposite: the small amount is the bait. Once you enter your card on the fake site, the scammers have all its details and charge whatever they want.
Check the tracking number your shop gave you (not the one in the text) on the courier's official site. If the parcel isn't shown as held there, the text is fake.
In most cases, a click alone isn't enough. Enter nothing, close the page, and check the link in Phishy to learn what you were dealing with.
Forward it to your country's spam-text reporting service and report the site to your national cybercrime portal. If money was taken, file a police report.