Parcel delivery scam
Fake AusPost or courier SMS asking for a small 'redelivery fee'.
How it works
An SMS says your parcel can't be delivered and asks for a small fee. The link captures your card details and adds them to a fraud network.
Common scenarios to watch for
This scam shows up in several different shapes. Recognise the pattern, not just one message.
AusPost 'redelivery fee'
Classic small-fee phishing. The page captures your card and signs you up to a recurring charge that hits 30 days later.
"AusPost: Delivery failed. Reschedule for $1.99: auspost-redeliver.shop"
Red flags to spot
- Is the SMS from a random number rather than AusPost's official channel?
- Does the URL not end in auspost.com.au?
- Are you being asked to pay a small fee you weren't expecting?
- Does the page ask for more information than needed (full card, DOB, address)?
DHL customs duty
A 'DHL' SMS says your overseas parcel needs $32 in customs duty. The page asks for full card details, address and date of birth.
"DHL: Parcel #DH829 held at customs. Pay $32.50 duty within 24h: dhl-clearance-au.com"
Red flags to spot
- Are you expecting an international parcel right now?
- Does the URL not match dhl.com or the official courier domain?
- Is the page asking for excessive personal details for a small fee?
- Are you being threatened with return-to-sender within 24 hours?
Fake 'update address' link
The link doesn't ask for money — just a 'new address'. It actually installs a banking trojan or harvests your full identity.
"Your parcel could not be delivered, please update the delivery address: track-parcel-au.top"
Red flags to spot
- Is the link asking you to 'update' details rather than pay a fee?
- Does the URL look suspicious or use a generic domain (.top, .xyz, .shop)?
- Are you being asked to download anything (app, profile, document)?
- Did you receive this unexpectedly without tracking an active order?
Red flags
- 🚩Asks for a fee on a small link
- 🚩Sender is a long random number
- 🚩URL is not auspost.com.au or your real courier domain
What to do
- 1Track parcels only in the official AusPost or courier app.
- 2Forward the SMS to 7726 and delete it.
- 3If you entered card details, call your bank now.
Who's targeted
- Anyone who shops online — especially during sales and holidays.
- Seniors who don't track parcel domains closely.
Why it works
- Most people genuinely have a parcel in transit somewhere.
- The fee is tiny ($1–$3), so victims pay without thinking.
Common variations
Different shapes of the same scam — recognise the pattern.
- 1'Address verification' page that captures full card details.
- 2'Customs duty' SMS for an overseas parcel.
- 3Fake 'AusPost app' install link with malware.
If you've already been scammed
- 1If you entered card details, call your bank and cancel the card now.
- 2Run a malware scan if you installed any 'tracking' app.
- 3Forward the SMS to 7726 and report to Scamwatch.
Frequently asked
Does AusPost ever charge redelivery by SMS?▾
No. AusPost will leave a card or notify you in their app.
The URL had 'auspost' in it — is it safe?▾
No. Scammers buy domains like 'auspost-track.shop'. Only auspost.com.au is real.
What does forwarding to 7726 do?▾
It reports the spam SMS to your telco's filters at no cost.
Related scams
Connected patterns you should also learn — ranked by how much they overlap with this one.
Bank SMS scam
Fake bank text telling you to 'verify' a payment via a link.
Read guideRomance scam
An online relationship that turns into requests for money.
Read guideFake government messages
myGov, Medicare, Centrelink lookalikes asking you to 'verify'.
Read guideTech support scam
Pop-ups or calls claiming your computer is infected, asking for remote access.
Read guideFake charity scam
Fake fundraisers that exploit disasters and emotional causes.
Read guideRecovery (refund) scam
Scammers targeting people who've already been scammed once.
Read guide