Courier, parcel and "undelivered package" scams
Couriers do not collect redelivery fees through links in text messages, and customs officers do not phone you about parcels.
Version one: the small fee
A text or WhatsApp message, seemingly from India Post or a courier company, says: "Your package could not be delivered due to an incomplete address. Update within 12 hours" with a link. The page looks like the courier's and asks for your address, then a small redelivery fee of a few rupees, payable by card.
The fee is not the goal. The page collects your card number, expiry, CVV and OTP, and a large payment is made at once, or your card is added to a wallet on the fraudster's phone.
Version two: the frightening call
A recorded voice says a parcel in your name has been returned or seized; "press 1 to speak to an officer". The "courier executive" says the parcel, sent with your Aadhaar and phone number, contained passports, SIM cards or drugs, and transfers you to a "police officer". From there it becomes the digital arrest scam: fear, isolation and a demand to move your savings to a "safe account".
Version three: the delivery you did not order
A cash-on-delivery parcel arrives for something nobody at home ordered, or a caller says an order must be cancelled and needs the OTP sent to you.
The signs
- You are not expecting a parcel, or the message names no order, sender or tracking number you know.
- The link is not the courier's own website address. See how to check a link.
- A tiny fee by card with a deadline.
- The message came from an ordinary mobile number, an email address or an overseas number.
- A call about a parcel turns to police, customs or crime.
- You are asked for an OTP to cancel something.
Safe checks
- If you are expecting a parcel, track it yourself: type the courier's address or open the shopping app, and enter the tracking number from your order.
- Do not tap links in delivery texts. Do not press any key on recorded calls.
- Redelivery, where a courier offers it, is arranged in its own app or by the delivery person, without card details.
- Refuse a cash-on-delivery parcel nobody ordered. Check with family first.
- Report the message or call on Chakshu at Sanchar Saathi, then block the number.
If you entered card details
Call your bank's official number at once to block the card and dispute any transaction, then follow "If money has already gone" below. Ask the bank for a replacement card with a new number.
The message knew my name and address. How?
Names, numbers and addresses leak from many sources. Knowing them does not make a message genuine.
I pressed 1 on a recorded call. Am I in danger?
Not from pressing a key. Simply end the call and do not engage further.
If money has already gone
- Dial 1930 at once. It is the national helpline for victims of financial cyber fraud. Give the transaction details; the earlier the report, the better the chance that the money can be held before it is moved on.
- Call your bank or card company on its official number and block the card, UPI or account. Report the transaction as unauthorised and note the complaint number.
- File the complaint on the National Cyber Crime Reporting Portal, cybercrime.gov.in, and keep the acknowledgement number.
- Keep everything: screenshots, numbers, UPI IDs, account numbers, transaction references, links, the app's name. Do not delete chats.
The full checklist, with what to keep ready, is on what to do after a fraud. Helpline and portal checked on 12 November 2026.
Independent guide. This is not a government, bank or police website. Helplines and rules were checked at official sources on 12 November 2026; confirm on the official site before relying on them.