Home  ›  Scam files  ›  Fake delivery

Attack file · Fake delivery

The parcel that was never sent.

Everyone is waiting for something to arrive, which is why this is the most sent scam message in the world. The fee is tiny on purpose. It was never the point.

The parcel that was never sent.What arrivesYour parcel is held at customs. Afee of 45 is required to releaseit. Pay here to arrange redelivery.2You tap the linkit is a good copy ofthe courier's page3You pay the smallfeetoo small to argueabout4They keep the cardand use it later,for much moreIt ends here: go to the courier yourselftheir move
The orange chip is the text, travelling until something stops it. Opening the courier's own app instead of the link ends it before anything is typed.

What happens

A message about a package. Held at customs, wrong address, unpaid duty. It arrives when half the country is waiting for a delivery, so it does not need to be clever.

The page behind the link looks right and asks for very little money. What it is really collecting is your card number, your address and a working phone number. The bigger charge comes weeks later, when nobody connects it to a parcel.

Why it works

  • The timing does the work. Nearly everyone has something in transit. The message only has to be plausible for a second.
  • A small amount is not a decision. Nobody thinks hard about a tiny fee. That is precisely why it is tiny.
  • A logo is enough for a glance. And a glance is all this ever gets.

The moment it stops

The tap. Never reach a delivery through a link you were sent. Open the courier's own app, or type the address yourself, and look for that tracking number there.

A real parcel can wait five minutes. Go to the courier rather than letting the courier come to you.

Simply not true, whatever they say

  • Customs charges are not settled through a link in a text from an unknown number.
  • If a courier really holds your parcel, the same tracking number will exist in its own app.
  • A small amount is not a small risk. The card details are the prize.

If it already happened

Speed matters more than anything, because money can sometimes be held before it moves onward. The first hour is worth more than the next week.

  • 1
    Call your bank on the number printed on your card

    Never a number given to you. Say the words fraudulent transfer, which is what starts a recall.

  • 2
    Report it the same day

    India: helpline 1930 and cybercrime.gov.in. United States: ic3.gov and reportfraud.ftc.gov. United Kingdom: Action Fraud, or 101. Elsewhere: your national police non emergency line.

  • 3
    Keep everything

    Screenshots, account numbers, phone numbers, transaction references, times. Dull to collect, and the only thing that makes a report actionable.

  • 4
    Tell your family that day

    Shame is what keeps people quiet, and quiet is what lets the same crew come back in three months with a different story.

What KnownSquare changes about this one

The honest answer

What we remove: Here the message has nowhere to arrive. A stranger cannot send you anything, and a link forwarded by somebody you know does not open quietly: it says plainly that you are leaving the part of the world where everybody is known.

What we do not touch: The same text will still reach your ordinary SMS inbox and your email, and neither is ours to fix. What changes is that it cannot appear inside your family's conversation, where it borrows the most trust.

On an open networka link arrives from nobodyand one tap reachesa page that wants your cardOn KnownSquarestrangers cannot send you anythingand a friend's link warns youbefore it takes you outsideit never arrives
The same attempt, on a network anyone can reach into and on one they cannot.

Sources and further reading

  1. UK National Cyber Security Centre, delivery scam texts
  2. US Federal Trade Commission, package delivery scams
  3. India, cybercrime reporting portal and 1930

Published 19 August 2026. Last reviewed 19 August 2026. Scam scripts change; if you have seen a version that differs from this, write to [email protected] and we will update the file and say that we did.

← All scam files