Listen to the episode
TLDR
Scammers impersonate postal services such as USPS, Poste Italiane, Correos, Chronopost and bpost, sending fake delivery failure notices that demand a small customs or redelivery fee. The link routes through URL shorteners to a polished...
How it works
Scammers impersonate postal services such as USPS, Poste Italiane, Correos, Chronopost and bpost, sending fake delivery failure notices that demand a small customs or redelivery fee. The link routes through URL shorteners to a polished...
Red flags
- Unexpected demand for customs or delivery fees via email/SMS with a shortened or odd looking link. Brand logos paired with unrelated sender addresses or misspelled domains (e.g. bpost.center ). Requests for both IBAN and full card details for a small payment, plus bogus "Secure SSL" reassurance labels
What to do
- 1Verify any delivery notice directly on the courier's official site or app using your tracking number. Never enter card or banking data from a link in an unsolicited message
- 2small fees don't justify full financial disclosure. If you already submitted details, freeze the card via your banking app, monitor transactions, change reused passwords, and report to your bank immediately
Source
malwarebytes
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/scams/2026/09/fake-parcel-delivery-messages-steal-your-card-and-bank-detailsFAQ
Is Fake parcel delivery messages steal card and bank details a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Unexpected demand for customs or delivery fees via email/SMS with a shortened or odd looking link. Brand logos paired with unrelated sender addresses or misspelled domains (e.g. bpost.center ). Requests for both IBAN and full card details for a small payment, plus bogus "Secure SSL" reassurance labels
What should I do first?
Verify any delivery notice directly on the courier's official site or app using your tracking number. Never enter card or banking data from a link in an unsolicited message; small fees don't justify full financial disclosure. If you already submitted details, freeze the card via your banking app, monitor transactions, change reused passwords, and report to your bank immediately
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.