"Your Parcel Is On Hold" — How to Spot a Fake Delivery Fee Scam

Scammers impersonate courier companies with urgent "your parcel is on hold" messages to steal your money and personal details. Here's how to recognize and stop them.

What Is a Fake Delivery Fee Scam?

A fake delivery fee text is a deceptive message designed to look like it comes from a legitimate courier or logistics company — think the kind of SMS or Viber notification you'd expect from a real shipping service. The message typically claims that a parcel addressed to you has been stopped, held at customs, or flagged for an unpaid fee. To release it, you're asked to click a link and pay a small amount, often just a few dozen pesos, to make the request feel low-stakes and believable. The genius of this scam is its timing and tone. Because so many Filipinos shop online and genuinely receive parcels regularly, the message lands in a believable context. You might actually be expecting a delivery — and that coincidence is exactly what scammers count on. The small fee feels like a minor inconvenience rather than a red flag, lowering your guard just enough to click. Understanding common scam types that target everyday Filipinos is the first step toward recognizing these tactics before they catch you off guard.

How Courier Impersonation Works

Courier impersonation is a form of brand spoofing. Scammers study the real notifications sent by well-known logistics companies and replicate their logos, color schemes, message formats, and even tracking number styles. The fraudulent link you're sent leads to a convincing copy-cat website — sometimes nearly pixel-perfect — where you're asked to enter your name, address, and payment card details or a GCash/Maya mobile number. Once you provide payment information, two things can happen: your money is taken directly, or your credentials are harvested for further fraud. In some cases, victims are redirected to a second page asking for a one-time PIN (OTP) under the guise of 'confirming' the payment — handing scammers complete access to their e-wallet or bank account. You can verify a suspicious message for free on TsekMuna before acting on any unexpected delivery notification.

Warning signs

• The message arrives via SMS or chat from an unknown number, not from the courier's official app or registered sender ID.
• The link uses a suspicious domain — it may include words like 'delivery', 'parcel', or a courier brand name but on a non-official domain (e.g., .xyz, .top, or long random subdomains).
• The message creates urgency: 'pay within 24 hours or your parcel will be returned/destroyed.'
• You are asked for your full card number, CVV, or OTP to process a small delivery fee.
• No specific sender name is shown, or the sender ID looks almost-but-not-quite right (e.g., a zero replacing the letter 'O').
• The tracking number in the message doesn't match anything when checked on the real courier's official website.
• The page asks for far more personal information than a simple fee payment would ever require.

Step-by-Step: What to Do When You Get a Suspicious Parcel Message

Receiving a message that claims your package is on hold can feel stressful, especially if you are genuinely waiting for something. Staying calm and following a clear process will protect you every time. This guidance is advisory only and not legal advice.

1. Do NOT click the link in the message. Even opening a phishing link on a mobile browser can trigger malware downloads or session-hijacking attempts.
2. Note the sender's number or sender ID, and the exact URL shown (without clicking it) — you'll need this if you report later.
3. Go directly to the real courier's official website by typing the address yourself, or open their official app. Use the tracking number from your original order confirmation — not from the suspicious message — to check your parcel status.
4. If you have no outstanding orders, the message is almost certainly a scam. Ignore and delete it.
5. Run the phone number or URL through a free scam check on TsekMuna to see if it has been flagged before.
6. Block the sender's number on your phone to stop follow-up messages.
7. Warn your family and contacts — especially older relatives — about the message, since scammers send the same blast to thousands of numbers at once.

Bookmark only the official websites of couriers you use regularly. That way, whenever a parcel message arrives, you can verify your shipment directly without risking a click on a fraudulent link.

Why the 'Small Fee' Hook Is So Effective

One of the most psychologically clever aspects of the fake delivery fee text is the amount requested. Scammers rarely ask for thousands of pesos upfront — instead, the fee is kept credibly small, often between ₱20 and ₱200. This mirrors actual courier re-delivery or customs processing fees that legitimate services do sometimes charge, making the request feel routine. But the fee itself is rarely the primary goal. The real prize is the payment page, where victims voluntarily enter card details, e-wallet credentials, or OTPs. A scammer who collects your GCash login or bank card number can drain far more than the ₱50 'processing fee' you thought you were paying. For deeper guidance on keeping your mobile wallet safe, read about protecting your GCash and Maya accounts.

Recognizing the Fake Website

Phishing sites built for courier impersonation scams are often sophisticated. Here's how to tell a fake apart from the real thing.

Warning signs

• The URL does not exactly match the courier's official domain — look carefully for extra words, hyphens, or unusual extensions.
• The padlock (HTTPS) icon is present but means nothing on its own — scammers can obtain SSL certificates for fake sites too.
• The page loads unusually fast or has broken images, odd fonts, or slightly off-brand colors.
• Payment options are limited to e-wallet numbers, bank transfers to a personal account, or card entry forms that look different from standard payment gateways.
• There is no verifiable business address, hotline, or official social media link in the footer.
• After 'payment', you are asked to provide an OTP sent to your phone — a sign your real account is being accessed.

If You Already Clicked or Paid

If you realize you've interacted with a fake delivery page, act quickly — speed matters. Knowing exactly how to report a scam in the Philippines means your case reaches the right authorities faster.

What to do instead

• Immediately change the password and PIN of any e-wallet (GCash, Maya) or bank account whose details you entered.
• If you shared an OTP, contact your bank or e-wallet provider's fraud hotline at once. GCash: 2882 | Maya: (02) 7795-7272 | BSP Consumer Protection: (02) 8708-7087.
• Request a transaction reversal or dispute the charge with your card issuer or e-wallet provider as soon as possible.
• Screenshot all evidence: the original message, the URL, any transaction confirmation.
• File a complaint with the PNP Anti-Cybercrime Group (PNP-ACG) online at acg.pnp.gov.ph or the NBI Cybercrime Division.
• Report the sender number to the National Telecommunications Commission (NTC) via their official channels so the number can be blocked network-wide.
• Monitor your accounts closely for any unauthorized transactions in the days and weeks following the incident.

Philippine law under Republic Act 8792 (E-Commerce Act) and RA 10175 (Cybercrime Prevention Act) covers online fraud. Reporting to the PNP-ACG or NBI creates an official record that supports any future legal or bank dispute process.

How to Stay Protected Long-Term

Staying safe from courier impersonation scams is less about vigilance in a single moment and more about building lasting habits. Sharing what you know with friends and family multiplies your protection — scam messages are sent in bulk, so the person next to you may receive the same text. Explore the full scam education hub on TsekMuna for guides covering a wide range of tactics used against Filipino consumers.

What to do instead

• Register your SIM card as required under the SIM Registration Act — a registered SIM provides a clearer trail for reporting scam senders.
• Enable transaction alerts and spending limits on all your e-wallets and bank accounts.
• Never share OTPs with anyone, for any reason — legitimate couriers and payment systems will never ask for one.
• Use unique, strong passwords for your e-wallets and enable biometric or two-factor authentication wherever available.
• Teach older family members to check with you before clicking any link or making any payment from an unexpected message.
• When in genuine doubt about a parcel, call the courier's official customer service number — found on their real website — instead of responding to the message.

Legitimate couriers in the Philippines will never ask you to pay a release fee via a link sent in an unsolicited SMS or chat message. When in doubt, go directly to the source.

Run a free scam check · More scam-safety guides