Package delivery scam text messages
Summary
Why is this warning issued?
This warning was included because it is based on a report from Verbraucherzentrale. It is intended to protect other users from this scam tactic. The assessed risk level is elevated.
How the scam works
- You receive a text message on your phone that claims to come from a parcel service such as DHL, Hermes, DPD, or Deutsche Post.
- The message states that your package cannot be delivered, that a customs payment is due, or that your address needs to be confirmed.
- The text message contains a link that you are supposed to tap to resolve the supposed problem.
- The link leads to a fake website that mimics the login or shipment tracking of real parcel services.
- On the fake page, you are asked to enter personal data, login credentials, or payment information.
- With the data they collect, the perpetrators misuse your identity, sign you up for subscriptions, make payments, or sell your data on.
How to recognise it
- You receive a text message from a supposed parcel service even though you are not expecting a package.
- The message tells you to track a shipment or confirm a customs fee or failed delivery.
- The text message contains a link that is meant to take you to a website.
- The message creates a sense of urgency (for example, "within 24 hours" or "act immediately").
- The sender looks unusual and is not the official number of the parcel service.
- The website behind the link looks like the login area of a parcel service but has a different URL.
- Paying an alleged customs/delivery fee via a link
- Prompt to install an app/file
How to protect yourself
- Do not click on links in text messages that supposedly come from parcel services. Instead, open the shipment tracking directly in the official app or via the official website of the parcel service.
- Check the supposed sender: reputable parcel services generally do not send text messages with payment requests or login links to unknown recipients.
- Save the fraudulent text message with a screenshot before deleting it so you can present it as evidence.
- Report suspicious text messages to Verbraucherzentrale via the Phishing Radar and to the police, for example via the Online Reporting Service.
- If you have entered data on such a page, change the affected passwords immediately and inform your bank.
- If in doubt, contact your local Verbraucherzentrale for personal advice.
What you should never do
- Do not click the link in the fraudulent text message and do not open any unknown attachments.
- Do not pay any alleged customs fees, postage due, or deposits that are demanded via text message.
- Do not enter any personal data, login credentials, or credit card information on the linked page.
- Do not reply to the text message or write back, even to stop the message.
- Do not delete the text message immediately before you have saved it as evidence.
Frequently asked questions
Do I have to pay the requested fee?
No. Real parcel services almost never request payment via text message and certainly not through a short link. If you are unsure, check the status of your shipment directly in the app or on the official website of the parcel service.
What happens if I don't respond?
Usually nothing happens. If a package is actually on its way to you, you can find the status in the official shipment tracking. If you do not respond, the scammers simply lose the chance to get hold of your data.
How did the perpetrators get my mobile number?
This often cannot be determined exactly. Data circulates through data leaks, illegal address traders, or purchased lists. The mere fact that you received a text message does not mean there has been any specific misuse of your data.
I entered my data, what should I do?
Change the passwords of affected accounts immediately, especially if you provided login details for a parcel account. Inform your bank if you entered payment details, and file a report with the police. Verbraucherzentrale can also advise you.
How can I recognize a real text message from a parcel service?
Real parcel services usually only send text messages to customers with an active account and typically notify them through their own app. Demands with a link or payment requests via text message are a strong warning sign of smishing.
Affected data
Comments
No comments yet. Registered users can share their experiences.
Related warnings
Original source
Find more information in the original source.
Verbraucherzentrale ↗Update history
- 22/07/2026Description updated, Characteristics added