A text saying “your parcel could not be delivered” is easy to believe because most people receive deliveries regularly. The scam becomes dangerous when the message asks you to click a link to update an address, pay a small re-delivery fee or confirm a delivery. Indian police advisories describe parcel-delivery scams using exactly these tactics, including time pressure and requests for personal or payment information.
How the missed-delivery scam works
- A message claims a package is waiting or could not be delivered.
- You are told that your address is incomplete or a small fee is due.
- A link leads to a look-alike courier or postal page.
- The page asks for personal information, card details, OTPs or a payment.
- A caller may follow up pretending to be the courier company.
The important point is that the parcel story is only the lure. The real objective can be credential theft, card fraud, malware installation or account takeover.
7 red flags in a delivery SMS
- Unexpected parcel: you do not recognize the shipment.
- Artificial deadline: “within 12 hours” or “today only.”
- Unfamiliar URL: the link is not the courier’s known domain.
- Small payment request: a low amount is used to make the request feel harmless.
- Address update: you are asked to enter more personal data than necessary.
- APK or app request: you are told to install an app outside the official app store.
- OTP pressure: the caller says a code is required to release the package.
How to check whether the parcel is real
Do not use the link in the message. Open the retailer, marketplace or courier app yourself and check your order history. If the shipment has a tracking number, enter it manually on the courier’s official website. If the package is from an Indian government or customs process, use the official government channel rather than a link supplied by an unknown sender.
For international or customs-related courier shipments, the Central Board of Indirect Taxes and Customs’ Express Cargo Clearance System provides official shipment-status facilities and explicitly warns stakeholders about phishing emails, calls and letters from unauthorized persons.
How to protect your phone if you clicked the link
- Close the page without entering more information.
- If you entered a password, change it from the genuine service and enable two-factor authentication.
- If you entered card or banking information, contact your bank through its official number immediately.
- If you installed an APK, disconnect the phone from sensitive accounts where practical, uninstall the malicious app and review permissions and recent activity.
- Keep your phone and browser updated so known security protections are current.
Never let a courier create urgency
A legitimate delivery problem can normally be checked through an order page, tracking number or official customer-support channel. If someone insists that you must click a particular link, install software or reveal an OTP immediately, stop and verify independently.
Related PURSHOLOGY resources
For more fraud-prevention guidance, read our local courier/logistics dispatch guide and guide to fake UPI Collect requests.
