How to Spot Fake Delivery Text Scams
Your phone buzzes. "Your package couldn't be delivered. A small fee is required. Click here immediately." It feels real — because you're almost always waiting on something. This is smishing: phishing by text message. Scamwatch, run by the ACCC, reports that fake delivery notices are now the most reported consumer scam in Australia — and the numbers keep climbing.
Have Been Targeted
of Australians have received a fake delivery text scam
Most Common Scam
fake shipping notices top all reported scams in Australia, per Scamwatch
How the Scam Actually Works
Scammers impersonate the biggest names in shipping — Australia Post, DHL, FedEx, and Amazon — and use one of four common pretexts to trick you into clicking a link that leads to a fake website designed to steal your personal information or credit card number.
Incomplete Address
Your package can't be delivered because there's a problem with your shipping address on file.
Customs Fee Due
An unexpected customs fee must be paid before your package can clear and be delivered.
Missed Delivery
No one was home to accept the delivery, and action is required to reschedule.
Package On Hold
Your package is being held at a depot until a small payment is made to release it.
Lost to scams in Australia
Australians lost over $3.1 billion to scams in a single year, according to the ACCC's Scamwatch — with text-based delivery scams among the fastest-growing categories.
Fraudulent texts per day
During peak shopping seasons like Click Frenzy and Black Friday, some scam campaigns send hundreds of millions of these fake texts in a single day.
The Simple Test That Catches Almost Every Fake
Real carriers don't send unsolicited texts
Real shipping carriers do not send unsolicited text messages about a specific delivery problem unless you personally signed up for tracking updates on that exact package. If a text arrives referencing a tracking number you never signed up to receive updates about, that alone is close to definitive proof the message is fake.
Watch for manufactured urgency
These messages are deliberately designed to create urgency — using phrases like "final notice," "held at depot," or "confirm now" — specifically to rush you past the moment of doubt where you might otherwise stop and think.
Who These Scams Target Most
According to Scamwatch (ACCC), Australians over 65 consistently report the highest losses to delivery and phishing scams — not because they are careless, but because these messages are built around completely normal, responsible behaviour. Scammers understand these instincts well, and they design their messages to exploit exactly those good habits. In 2023 alone, older Australians lost tens of millions of dollars to text-based scams, and the ACCC believes the true figure is far higher since most victims never report.
They Track Deliveries
With Australia Post delivering over 3 billion items a year, responsible Australians keep a close eye on their parcels and follow up the moment something seems off.
They Respond Quickly
Caring people act fast when there seems to be a problem — exactly the urgency scammers manufacture with phrases like "your parcel is on hold at the depot."
They Fix Problems Fast
Organised Australians want to resolve issues the moment they see them — making them prime targets for "confirm now to avoid return to sender" messaging.
What To Do Instead
Package delivery texts are so common precisely because we are all a little bit used to expecting them. That familiarity is the scam's greatest weapon, and a moment of healthy scepticism is the simplest way to take that weapon away.
Don't click the link
Do not click any link in an unexpected delivery text. Instead, open the shipping carrier's official app or website directly and check your tracking information there.
Treat unknown tracking numbers as suspicious
If you did not sign up for text alerts about a specific package, treat any text referencing a tracking number as suspicious by default.
Report it to your carrier
Forward suspicious texts to 7226 (which spells "SCAM" on most keypads) to report it to your mobile carrier.
Report to Scamwatch
Report the scam to the Australian Competition and Consumer Commission (ACCC) at scamwatch.gov.au, and to Australia Post's own fraud reporting page if Australia Post is being impersonated.
Warn older family members
If an older family member regularly shops online, take a few minutes to walk them through this exact scam pattern, since a short conversation now can prevent a real financial loss later.
What Happens If You Do Click
If you have already clicked and entered personal or payment information, act quickly — embarrassment is not a strategy. Here is what to do immediately:
Contact Your Bank or Card Issuer
Call immediately to explain what happened. They can watch for suspicious charges, block your card, and issue a new card number if needed.
Change Reused Passwords
If you entered a password you also use elsewhere, change it on every account where you reused it — scammers routinely try stolen credentials across multiple sites.
Monitor Statements for Weeks
Keep a close eye on your bank and credit card statements over the next few weeks for any charges you do not recognize.
Place a Fraud Alert if SSN Was Shared
If you shared particularly sensitive information such as a Social Security number, consider placing a fraud alert with the major credit bureaus right away.
Household Awareness
Share this scam pattern with everyone in your household who shops online — including teenagers with their own accounts. A short, low-pressure conversation about this one pattern can meaningfully reduce the whole family's exposure.
Official Fraud Pages
Major retailers and shipping carriers now publish dedicated pages explaining exactly what their legitimate delivery communications look like — and explicitly stating they will never ask for payment via a text link. Check once; benefit every time.
A Habit Worth Building
Pause Before Reacting
Genuine shipping problems are rarely so urgent that a company would threaten to cancel your delivery within hours. Real carriers always give you multiple ways to resolve an issue — not just a single link in a text.
Go Direct — Don't Tap the Link
Build the reflex to open the retailer's official app or website yourself. This one habit protects you against this scam and a wide range of similar ones at the same time.
Legitimate Problems Are Always Resolvable
Real delivery issues can be sorted through customer service or the retailer's app — no unexpected fee via a text link is ever required. When in doubt, look up the company's number independently.
Glossary
New to some of the terms used in this guide? Here's a plain-English explanation of every key word and phrase you need to know.
Smishing
A scam delivered as a text message (SMS). The word blends "SMS" and "phishing." Scammers send fake texts pretending to be trusted companies to steal your personal or financial information.
Phishing
Any scam where a criminal pretends to be a trustworthy organisation — bank, delivery company, or government agency — to steal your information. It can arrive by email, text, phone, or fake website. Smishing is phishing done by text.
Tracking Number
A unique code a carrier assigns to your parcel so you can follow it online. Scammers include fake tracking numbers in their texts to make fraudulent messages look legitimate.
Customs Fee
A real tax on goods shipped from abroad. Scammers use it as a pretext because it sounds official. Legitimate customs fees are never requested via a text link — they come through official postal or customs notices.
FTC (Federal Trade Commission)
The main US agency responsible for protecting consumers from fraud. Report scam texts at reportfraud.ftc.gov. Your report helps the FTC identify and shut down scam operations.
Fraud Alert
A notice placed on your credit file with Equifax, Experian, or TransUnion. It instructs lenders to verify your identity before opening new accounts — useful if you accidentally shared sensitive details with a scammer.
SSN (Social Security Number)
A unique nine-digit US government identifier used for tax and financial purposes. It is extremely sensitive — sharing it with a scammer can lead to identity theft, where criminals open accounts or take out loans in your name.
Credit Bureau
A company that collects and maintains your borrowing and repayment history. The three main US bureaus are Equifax, Experian, and TransUnion. A fraud alert or credit freeze can be placed here if you suspect identity theft.
Impersonation
When a scammer pretends to be someone else — USPS, FedEx, UPS, DHL, or Amazon — to gain your trust. They copy logos, mimic official language, and use similar-sounding web addresses to make fake messages look genuine.
Manufactured Urgency
A psychological trick designed to make you act before you think. Phrases like "final notice" or "confirm within 24 hours" trigger panic and bypass scepticism. Real companies always give you time and multiple ways to resolve an issue.
Your Package Isn't Stuck