Courier and parcel scams: “update your address” links and “drugs in your parcel” calls
There are two common courier scams. The first is an SMS saying an India Post, Delhivery or DHL parcel is on hold because the address is incomplete, with a link to pay a small redelivery fee: the page steals your card details.
The second is a call saying a FedEx or DHL parcel in your name has drugs or fake passports, which turns into a “digital arrest” demand for money. Track parcels only with the tracking number from the shop, in the courier’s official app, and hang up on any “customs” or “police” caller.
Last updated: Reviewed by IndiaDigital editorsSources
How does this scam work?
- You get an SMS: your parcel could not be delivered, update your address within 24 hours.
- The link opens a copy of the India Post or courier site asking for a ₹25 fee and your card details.
- Or an automated call says your FedEx parcel was seized, press 1 to talk to customs.
- The “customs officer” passes you to fake police who demand money to clear your name.
Real-style examples
Numbers and links are changed. The red flags are marked by the same engine that runs in the Scam Checker.
IndiaPost: Your package has arrived at the warehouse but could not be delivered due to incomplete address information. Please update your address within 24 hours: https://indiapost-track.top/in
- Fake brand website
- Asks you to “update address” or pay for redelivery
- Unusual web address ending
This is FedEx customs. A parcel in your name to Taiwan contains MDMA drugs and fake passports and has been seized. Press 1 to speak to the Mumbai Police officer.
- “Drugs found in your parcel”
Red flags: how to spot it
- A link to update your address or pay a redelivery fee
- A parcel you never sent or ordered
- Drugs, passports or cash “found” in a parcel
- Transfer to “police” or “customs” on the same call
How to check if it is real
- Use the tracking number from the shop where you ordered, on the courier’s own app.
- India Post tracking is on indiapost.gov.in; the address ends in .gov.in.
- Customs and police never settle cases on a phone call.
What to do if you get one
- Don’t open the link or press any key on the call. Block and report on Chakshu.
- If you entered card details, call your bank to block the card.
- If you paid “customs” or “police”, call 1930 at once.
Remember: Track parcels only in the courier’s own app or website. Real couriers don’t ask for fees through random links.
Lost money? What to do in the first hour
- Call 1930 now. The National Cyber Crime Helpline. The first hour matters most: a quick report lets banks try to hold the money before it moves on.
- File the complaint on cybercrime.gov.in. Add the transaction ID or UTR, amount, time, the UPI ID or account the money went to, and screenshots. Note your complaint number.
- Tell your bank and freeze cards and UPI. Call the number on your card or in the bank app. Reporting within 3 working days can limit your liability under RBI rules.
- Keep the evidence, beware “recovery agents”. Don’t delete chats. Anyone who charges a fee to get your money back is running a second scam.
Frequently asked questions
Does India Post send SMS asking to update the address?
India Post may send delivery updates, but not links on other domains asking for fees and card details. Its official site ends in .gov.in.
FedEx called about drugs in my parcel. Is it real?
No. It is the opening of a digital arrest scam. Hang up and do not transfer any money.
Related scams
Sources
National Cyber Crime Reporting Portal (1930) · Sanchar Saathi: Chakshu, report suspected fraud communication · RBI: limiting customer liability in unauthorised electronic banking transactions