Fake USPS, DHL & PostNL Delivery Texts: How to Spot Them
Why fake delivery texts and emails work
Almost everyone is waiting on a package at some point, so a message about a delivery problem feels urgent and believable. Scammers send these by the millions and only need a few people to click. The text or email pretends to be from USPS, DHL, PostNL, or another carrier and claims your parcel is held up, a small fee is due, or your address needs confirming. The link leads to a page that copies the real carrier site and quietly collects your card number, login, or personal details.
The signals that give a fake away
You can usually tell within a few seconds. Look for these:
- A fee or "redelivery" charge. USPS, DHL, and PostNL do not text you asking for a small payment to release a package. A tiny "customs" or "redelivery" fee is the classic bait — the goal is your card details, not the small amount.
- The web address is wrong. Real links end in the carrier's own domain: usps.com, dhl.com, postnl.nl. Fakes use lookalikes like usps-tracking-info.com, dhl-parcel-support.net, or a random string. Anything with the brand name buried in the middle or after a dash is a red flag.
- A tracking number you do not recognize — or no tracking number at all, just "your package."
- Odd sender details. Texts from a personal-looking mobile number or a foreign country code, or emails from a free address rather than the carrier's own domain.
- Pressure and threats. "Your parcel will be returned in 24 hours," "final notice," or "account suspended." Real carriers simply leave a slip or retry delivery.
- Small spelling and grammar slips, or a greeting with no name.
Check the link without clicking
On a phone, press and hold the link to preview the full address instead of tapping it. On a computer, hover your mouse over it and read the address that appears at the bottom of the screen. If the domain is not the carrier's official one, delete the message.
What to do right now
- Do not click, and do not reply — not even "STOP," which only tells a scammer the number is live.
- Verify independently. If you really are expecting a parcel, open the carrier's official website yourself or use the tracking number from your original order confirmation. Never use the link in the message.
- Report it. In the US, forward scam texts to 7726 (SPAM) and report USPS phishing to [email protected]. Report suspicious emails to the carrier's abuse or phishing address, then delete.
- Block the sender and mark the message as junk or spam so your provider filters similar ones.
Not sure whether a message is real? Paste it into HasTrust's scam checker for a quick read before you act on it.
If you already clicked or entered details
Do not panic, but move quickly:
- Entered your card? Contact your bank or card issuer, freeze or cancel the card, and watch for charges. Ask them to reverse anything you did not authorize.
- Entered a password? Change it immediately, and change it anywhere else you reused it. Turn on two-factor authentication where you can.
- Gave personal details? Stay alert to follow-up scams that use what you shared, and consider a fraud alert on your credit if a lot was exposed.
- Tapped a link but entered nothing? You are most likely fine. Close the page and do not install anything it prompted you to.
How this connects to fake shops
Delivery scams often follow an order from a sketchy online store: you buy something cheap, then get a "shipping fee" text a few days later. The store may have sold your details, or the whole thing may be a setup from the start. Before you buy from an unfamiliar site, a 30-second check is worth it. You can check any shop on HasTrust to see whether other shoppers have flagged it.
Simple habits that keep you safe
- Treat every unexpected delivery message as suspicious until you verify it on the carrier's own site.
- Never pay a "release fee" by clicking a link in a text or email.
- Keep your order confirmations, so you always have a real tracking number to compare against.
- Slow down. Urgency is the scammer's main tool — a genuine carrier is happy to wait while you check.
Frequently asked questions
Does USPS or DHL ever charge a fee by text?
No. Carriers like USPS, DHL, and PostNL do not send texts asking you to pay a small fee to release a package. Any redelivery or customs fee demanded through a text link is a scam designed to steal your card details.
How can I tell if a delivery link is fake?
Check the domain. Real links end in the carrier's official address, such as usps.com, dhl.com, or postnl.nl. Fakes use lookalikes with the brand name buried after a dash or in the middle, like dhl-parcel-support.net. Preview the link by pressing and holding it before tapping.
I clicked the link but didn't enter anything. Am I at risk?
You are most likely fine if you didn't type in details or install anything. Close the page, don't download anything it offered, and delete the message. If you're unsure, run a security scan on your device.
What should I do if I entered my card details?
Contact your bank or card issuer right away, freeze or cancel the card, and watch for unauthorized charges. Ask them to reverse anything you didn't approve, and change any passwords you may have entered on the fake page.
How do I report a fake delivery text?
In the US, forward the text to 7726 (SPAM) and report USPS phishing to [email protected]. For emails, forward them to the carrier's official phishing or abuse address, then block the sender and delete the message.
Not sure about a specific shop?
Paste its name or web address and get a trust score in seconds — or paste a suspicious message into the scam checker.