A text message or email says a parcel is waiting for you, and one click leads to a page that looks like the courier. You can recognise parcel phishing from a few features once you know what to look for. The most important rule: never enter data on a page beyond a tracking number, and never pay a fee through a link in a message.
Short answer: Fake delivery notices impersonate courier services by email and text message and link to pages that ask for data or payments. Warnings about fake DHL and UPS emails and false text messages have been published for years, most recently by police and consumer advocates. Check the parcel only through the courier official website or app, never through the link in the message. Status: November 2026.
Key points at a glance
- Fake notices pose as DHL, DPD, Hermes, UPS or another delivery service.
- Urgency, threats of return and small fees are typical warning signs.
- Never enter bank or card details through a link in a delivery message.
- Check the tracking number on the official website or in the official app of the courier.
- If you are suspicious, do not simply delete the message. Report it.
How do you recognise a fake parcel notification?
Fake messages often look convincing but contain errors or irregularities that can be checked systematically. The overview below shows what to look for.
| Feature | What is suspicious | What to do instead |
|---|---|---|
| Sender address | Unknown domain, slightly altered logo, private email address | Do not trust the sender, check the parcel through the official route |
| Greeting and text | Generic greeting, awkward wording, pressure to act quickly | Do not react and do not reply |
| Link | Shortened link, misspelled domain, request to enter personal data | Do not open the link, go to the courier website directly |
| Payment | Request to pay a small fee or customs charge | Do not pay anything through the message |
| Tracking number | Number does not match any order you placed | Check your own orders and shipping confirmations |
The combination of time pressure and small amounts is especially deceptive. A fee of a few euros seems harmless, but it is often used to capture card details. For that reason, treat any payment request with suspicion until you have checked the parcel yourself.
What should you do before clicking?
The safest approach is not to respond to the message. If you really expect a parcel, check its status in your order history in the online shop or through the courier official tracking. There you can see whether a delivery is scheduled and whether a shipping notice exists. If nothing matches, the message is very likely fake.
- Read the message calmly without clicking on the sender or the link.
- Open the order history of your online shop and check the shipping status.
- Enter the tracking number directly on the courier official website or in its app.
- If something is unclear, contact the courier through its official channels and report the message.
What if you have already entered data?
If you have entered data on a fake page, act at once. Change passwords, especially if you use them elsewhere, and block your card if payment details were involved. A step-by-step guide is available in identity theft for students.
If your account has already been charged, inform your bank on the same day if possible. Document the message with a screenshot and the time before you delete it, because you need these details for a police report.
Frequently asked questions about parcel phishing
Can a courier ask me for a payment by text message?
Legitimate services do not usually ask for payments through links in messages. If a message demands exactly that, treat it as a fraud attempt and check the parcel through the official route.
How do I know whether I am really expecting a parcel?
Compare the message with your orders. If you cannot remember any order or the sender does not match, the message is more likely a fake. Tracking numbers can also be checked directly with the courier.
What should I do if I received a message I did not open?
Do not delete it straight away. Report it to the service it claims to come from or to a consumer advice centre if that seems sensible. Reports help keep warnings current.
Are students particularly affected?
Students often order a lot online, move house frequently and regularly expect deliveries. That makes fakes more convincing. A fixed routine for checking deliveries is therefore especially important.
Why do fake notices look so convincing?
Fraudsters copy logos, colours and wording from real senders. They also use periods when many parcels are really on the way, such as before public holidays or sales. Anyone who receives a notice at such a time is more likely to believe it. The pattern stays the same: a trigger creates expectation, a link demands action and a form asks for data.
Technology adds to the problem. On a smartphone, links are often shortened, so the real address stays hidden. It is worth checking suspicious messages on a computer or in a view where the full domain is visible.
Which details should you record for a report?
- Date and time of arrival
- The complete sender address or phone number
- The wording of the message and the link as text
- The name of the courier that the message claims to be
- Whether any data was entered or any payment made
These details help to make warnings more precise and, where needed, support a police report. Delete the message only once everything is secured.
How to track deliveries safely in everyday life
Set up a fixed routine. Note expected parcels in a calendar or a memo and compare every notice with that list. Many online shops show the shipping status directly in the customer account, so you do not have to rely on external links. If a message announces a parcel that is not on your list, that is a clear reason for caution.
What to do now
- Never check delivery messages through the link inside them.
- Review your own orders in the online shop and note the shipping status.
- Use the official app or website of the courier for tracking.
- Report suspicious messages and refuse any payment.
Related guides
- Phishing email from the bank: how to recognise it
- Phishing at university: how to check emails properly
- Recognising fake online shops
- Phishing losses: does insurance pay the money back?
- Consumer rights in everyday life: protection against fraud and unfair contracts
Sources: Consumer advocates warn about fake UPS and DHL emails (German report, no date); Phishing warning: police warn about fake parcel service messages (German report, no date).
Last updated: November 2026. This guide is general information, not individual advice.
