Skip to content
All guidesGuide

Parcel & delivery-fee scams

A text or email impersonating DHL, DPD, the post office or customs says a parcel is held and a small fee is needed to release or redeliver it. The link harvests card data; the "fee" is tiny to lower your guard.

Reviewed by Florian Wartner · Last updated

How the scam works

You receive an SMS or email, supposedly from a courier such as DHL, Hermes, or the postal service, saying a parcel is waiting but a small fee - often just one or two euros - must be paid to release it or cover customs. The message contains a link to a page that looks like the carrier's site and asks for your card details to pay the fee.

The tiny amount is a decoy. The real goal is to capture your card number, expiry, and security code, which the criminals then use for large unauthorised charges or sell on.

Why it works and who is targeted

Almost everyone is expecting a parcel at some point, so the message often arrives at a plausible moment. A fee of one or two euros feels too small to be worth a scam, which makes people pay without thinking.

These messages are sent in huge volumes to random numbers, so they are not personal. They succeed through sheer reach: even if only a few percent of recipients are awaiting a delivery and click, the criminals collect many sets of card details.

Warning signs in detail

Look closely at the sender and the link. Real carriers do not collect delivery fees by SMS link, and the web address will often be a lookalike domain with extra words or an unusual ending rather than the carrier's true site. Genuine customs charges in the EU are handled with proper documentation, not a surprise text demanding instant card payment.

Other signs are generic greetings, no real tracking number, spelling mistakes, and a sense of urgency that the parcel will be returned if you do not pay now.

How to protect yourself

Do not tap the link in the message. If you are genuinely expecting a parcel, open the carrier's official app or type its website address yourself and check the status with the tracking number you received when you ordered.

If you already entered card details, contact your bank at once to block the card and watch for unauthorised charges. You can forward scam texts to your mobile operator's reporting service and report them to the Verbraucherzentrale, then simply delete the message.

Warning signs

  • A "customs" or "redelivery" fee for a parcel you may not expect.
  • A link to pay a very small amount to "release your parcel".
  • Sender number or domain that is not the official carrier.

Example

Your package is waiting. A shipping fee is required to schedule your delivery. Pay the small fee to release your parcel: hxxp://dhl-redelivery.info

Made-up example - not a real message.

How to protect yourself

  1. 01Track parcels only via the carrier's official app or website.
  2. 02Customs fees are never collected by SMS link.

Already caught out?

  1. 01If you entered card data, block the card and watch for charges.
  2. 02Report the smishing text to your carrier and delete it.