🐟 Phishy
HomeScam guides

The 'package held at customs' scam — how to spot it

One of the most common scams worldwide: an SMS or WhatsApp impersonating a delivery company (USPS, DHL, Royal Mail and others) claiming a package is waiting or a small customs fee is due, with a payment link. The goal is to steal your card details. Real couriers don't collect customs fees via an SMS link.

Suspect a message like this? Check it free.
🔍 Check a suspicious message

What the scam looks like

A message like: 'Your parcel is held. Pay a $1-3 customs fee to release it: bit.ly/xxx'. The tiny amount is deliberate — once you enter card details, they are stolen.

4 red flags

• A shortened or odd link instead of the courier's official domain • Urgency: 'package returned within 24 hours' • A small, strange fee • A request to enter card details via the link

What to do

1. Don't click. 2. Go directly to the courier's official site or app. 3. If you already entered details, call your bank to block the card. 4. When in doubt, paste the message into the free checker below.

Want Phishy to check every message automatically — for your parents and kids too?
Download Phishy free

FAQ

Do couriers send a payment link by SMS?

No. Customs and delivery fees are handled on the official site or app, never through a link in a text.

The fee is tiny, so it must be real?

The small amount is the trick — it lowers your suspicion. They're after your card details, not the fee.

More guides:'Your bank' texted you — how to spot impersonationSuspicious WhatsApp message — check before you tapHow to know if a link is safe to clickThe 'you won a prize' scam — how to spot itCrypto & investment scams — how to spot them