The message arrives out of nowhere: "Your parcel AWB#IND2847561 is held at customs. A clearance fee of โน299 is required to release it. Pay within 24 hours or it will be returned." The sender looks like FedEx, Blue Dart, or India Post. The urgency is real โ especially if you are actually expecting a package.
This is the courier delivery scam โ one of the most widely reported online frauds in India right now. The โน299 customs fee is the hook. Behind it is a phishing website that steals your card details, or a gateway to steal much larger amounts.
Real courier companies never ask you to pay via a link in an SMS.
All genuine tracking, delivery updates, and any applicable customs duties are handled through the courier's official app or website โ never through a payment link someone sends you.How the Courier Scam Works
- 1 You receive an SMS or WhatsApp message claiming to be from FedEx, Blue Dart, DTDC, India Post, DHL, or Delhivery. It says your parcel is held, undeliverable, or requires a small fee to be released. It includes a tracking-style AWB number to look authentic.
- 2 You click the link and land on a website that looks exactly like the real courier's site โ same logo, same layout, same colors. It asks for a small payment of โน99 to โน499 to "release" your parcel.
- 3 You enter your card details. The fake site captures your full card number, CVV, expiry date, and billing address. This is enough to make unauthorized transactions on your card.
- 4 Some variants steal more through OTP. After you enter card details, an OTP is triggered by a real transaction the scammer initiates on your card. The fake site asks for the OTP to "confirm payment" โ you unknowingly authorize a much larger charge.
- 5 In some cases, the link installs a tracking app (APK). The site says you need to install a "delivery tracking app" to receive your parcel. This APK steals your SMS messages, including banking OTPs, and gives scammers ongoing access to your accounts.
โ ๏ธ The small fee (โน99โโน499) is bait. The real target is your full card details or OTP โ which can be used to drain your account or make purchases worth lakhs.
Real Examples of Fake Courier Messages
๐ฑ SMS โ Fake FedEx
FedEx: Your shipment AWB#IND2847561 requires customs clearance. Pay โน299 fee to avoid return: https://fedex-india-delivery.com/pay. Offer valid 24 hrs only.
๐ฑ SMS โ Fake India Post
India Post: Your parcel (RX4829102IN) could not be delivered due to incomplete address. Update your address and pay โน49 redelivery charge: indiapost-redeliver.in/update
๐ฑ SMS โ Fake Delhivery
Delhivery Alert: Package #DEL8472910 held at warehouse. Customs duty of โน199 unpaid. Pay now to schedule delivery: delhivery-customs.com/pay โ expires tonight.
๐ฌ WhatsApp โ fake delivery agent
"Hello, I am your delivery agent from Blue Dart. Your package is at our facility but we cannot deliver without customs clearance. Please pay โน350 on this link and share the screenshot with me. I will deliver tomorrow morning."
5 Red Flags of a Fake Courier Message
A payment link in the SMS. Real courier companies (FedEx, Blue Dart, DTDC, India Post, Delhivery) never send payment links via SMS. If customs duty genuinely applies, they contact you through official channels and the payment is made at their office or through their official app.
The website domain is not the courier's real domain. FedEx's real site is fedex.com/en-in. India Post is indiapost.gov.in. Blue Dart is bluedart.com. Any variation โ fedex-india.com, indiapost-delivery.in, bluedart-tracking.net โ is fake.
You are not expecting any parcel. The AWB number in the message is randomly generated. Scammers send this to millions of people knowing that some percentage will be expecting a delivery and assume it refers to their parcel.
A "delivery agent" contacts you on WhatsApp. Genuine delivery agents do not contact customers on WhatsApp asking for payments. If a delivery is genuinely failing, the courier company calls you through their official customer care number.
Asked to install an app from a link. No courier company requires you to install a separate app via a WhatsApp or SMS link. Their official apps are always on the Play Store or App Store. Any APK file shared via a link is malware.
How to Check a Real Parcel
If you receive a delivery notification and are unsure if it is real:
- Go to the courier's official website yourself โ type the URL in your browser. Do not click any link in the SMS.
- Enter the AWB/tracking number from the message directly on the courier's official tracking page.
- If the tracking number shows no result or belongs to someone else, the message is fake.
- If you genuinely ordered something, check your order confirmation email for the real tracking number and courier company.
๐ก For India Post parcels: use the official track-n-trace at indiapost.gov.in. For FedEx: fedex.com/en-in/tracking. For Blue Dart: bluedart.com/tracking. Never trust a tracking link sent to you โ always go to the site yourself.
What to Do If You Already Paid or Entered Card Details
- 1 Call your bank immediately and report the card as compromised. Ask them to block the card and reverse any unauthorized transactions. Time matters โ act within hours for the best chance of recovery.
- 2 Call 1930 (Cyber Crime Helpline) and report the fraud. Provide the payment amount, website URL, and any phone numbers involved. File a formal complaint at cybercrime.gov.in.
- 3 If you installed an APK: factory reset your phone if possible, or immediately uninstall the app, change all your banking passwords from a different device, and disable net banking until you have spoken to your bank.
- 4 Monitor your account statements for the next 30 days for any unauthorized transactions. Report each one to your bank immediately.
How to Protect Yourself โ 4 Rules
Never pay via a link in an SMS. Always go to the courier's official website directly and track your parcel there.
Check your orders first. If you are not expecting any parcel, the message is almost certainly fake. Ignore it.
Never install an APK from a link. All legitimate delivery apps are on the Play Store or App Store โ search for them yourself.
When in doubt, call the courier directly. Use the customer care number on the courier's official website โ not any number given in the suspicious message.
๐ Cyber Crime Helpline: 1930 | Report: cybercrime.gov.in
Call your bank immediately if card details were shared.