Fake courier / package on hold
In plain terms
A text message announces a held package and asks for a few euros in fees. The small amount isn't the goal: it's your full card number they're after, to be used later for much bigger charges.
Definition
The package scam is a text message or email claiming that a delivery is on hold and that a small payment — customs fees, reshipping fees, an adjustment — is needed to release it.
How it works
The message imitates a well-known carrier and announces a package on hold. The amount requested is deliberately low, often just a few euros, since a small sum raises less suspicion than a large one. The payment page collects full banking details. These are then used for much larger charges, or to sign up for a recurring subscription. The attack works because it arrives at a plausible moment: many people really are waiting for a delivery.
Warning signs
- Fees requested for a package you didn't order, or whose carrier doesn't match
- Small amount but card payment requested online
- Link leading to a domain that isn't the carrier's official site
- Message received while no delivery is actually pending
- No tracking number verifiable on the official site
How to verify
Find the tracking number in your original order confirmation, then enter it yourself on the carrier's official site. Never follow the link in the message to verify the message itself.
What to do
Don't pay, don't enter your card details. Delete the message. In France, a fraudulent text message can be forwarded to 33700; check your own country's equivalent reporting number.
If it already happened
Block your card immediately and watch the following weeks' charges, especially recurring subscriptions. Dispute the charges with your bank and file a police report.
Frequently asked questions
- The amount asked for was tiny — where's the risk?
- The payment isn't the goal: collecting your banking details is. The small amount is only there to get you to enter your full card details.
- I really am waiting for a package — how do I know?
- A legitimate carrier always ties the process to a tracking number you can verify yourself on its official site. Verify that number by your own means, never through the received link.
Related attacks
Official sources
This article is part of the Financial fraud family. Last updated: 2026-08-31.