How to Spot Fake Parcel Delivery Texts in New Zealand
Share
Have you ever received a text message saying your parcel could not be delivered, your address is incomplete, or you need to pay a small fee before your package can arrive? Before clicking anything, stop and check.
Fake parcel delivery messages are a form of phishing. Scammers impersonate delivery companies to persuade people to visit fraudulent websites, reveal personal information or submit payment details.
New Zealand shoppers should be particularly cautious when they are expecting online purchases. A convincing message can arrive at exactly the right time by coincidence, making it appear genuine.
Netsafe's New Zealand guidance describes courier delivery scams involving messages that imitate delivery companies and direct recipients to websites requesting personal or financial information. Some fraudulent links can also lead to malicious applications.
1. What does a fake parcel delivery text look like?
Scam messages often imitate well-known courier companies and create a reason for you to act immediately. You might receive a message claiming:
- Your parcel could not be delivered.
- Your delivery address needs to be corrected.
- You must pay a small redelivery fee.
- Your package is being held until you confirm your details.
- A customs charge must be paid before delivery.
- You need to download an application to track your parcel.
The message may include a link to a website that looks similar to an official delivery company's website.
The warning sign is not necessarily the wording itself. It is the combination of an unexpected request, pressure to act and a link or payment request that you have not independently verified.
New Zealand Consumer Protection advises treating unexpected communications cautiously, particularly when they create urgency or request money, passwords or financial information.
Example of a suspicious message
Your parcel is on hold because your address is incomplete. Pay a small redelivery fee now to avoid having your parcel returned. Click here to update your details.
It might look convincing, particularly if you have recently ordered something online. However, do not use the message's link to investigate the claim. Check your order and delivery status through the retailer's or courier's official website or application instead.
A convincing message does not prove that it came from a legitimate company.
2. Five warning signs to check before clicking
Warning sign 1: An unexpected payment request
Be suspicious of messages demanding an unexpected payment before a parcel can be delivered. A small amount can make a request seem harmless, but the bigger risk may be submitting your card details to a fraudulent website. If a payment genuinely appears to be required, verify it independently through the official delivery provider or the business that arranged your shipment.
Warning sign 2: A suspicious website address
Look carefully at the website address. Scammers may use addresses that resemble genuine companies but contain extra words, misspellings or unfamiliar domain names. NZ Post says its website links use nzpost.co.nz or its official short-link domain, nzp.st. If you are unsure, avoid the message's link and open the company's official website independently.
Warning sign 3: Pressure to act immediately
Scammers may claim that your parcel will be returned, your account suspended or your delivery cancelled unless you act immediately. This pressure is designed to make you react before checking whether the message is genuine. Take a moment to verify the claim.
Warning sign 4: An unusual sender
A message may arrive from an unfamiliar number or appear to come from a recognised organisation. However, the sender name or number alone is not a reliable way to prove a message is genuine. Some scammers use SMS technology to imitate sender codes used by legitimate organisations, so verify the request independently.
Warning sign 5: A request to install an application
Be especially careful if a delivery message asks you to download an application from a website or install a file to track your parcel. Do not install software simply because an unexpected text tells you to. Use the official app store or the delivery company's independently verified website when you need a tracking application.
3. How to check whether your parcel message is genuine
Step 1: Open your original order confirmation
Find the confirmation email or order details from the retailer where you made your purchase. Check whether the retailer has provided a tracking number or named a delivery company. If you were not expecting a parcel, be especially cautious about unexpected delivery messages.
Step 2: Check tracking independently
Open the courier's official website by typing its address yourself or using a trusted bookmark. Alternatively, open the official delivery application you already use. Enter your tracking number directly if one is available. Do not rely on a suspicious message's link.
Step 3: Verify unexpected charges
If a message claims you owe a delivery or customs fee, do not immediately pay it. Contact the delivery provider or retailer through contact details you find independently. Verify any unexpected charge through the legitimate organisation responsible for your shipment.
Step 4: Never share verification codes
Do not provide your banking password, account password or one-time verification code through a link in an unexpected message. If you need to sign in, navigate to the official service independently.
A simple rule to remember: If a delivery message surprises you, verify it separately before doing anything it asks.
4. What should you do if you accidentally click a scam link?
Accidentally opening a suspicious link does not automatically mean your phone has been compromised. What matters is what happened next.
If you opened the website but entered nothing
Close the page. Do not download files, install applications, grant permissions or enter personal information. Keep your phone's operating system and applications updated. If you notice unusual behaviour afterwards, seek trusted technical assistance.
If you entered your bank or card details
- Contact your bank using its official app, website or the telephone number on your bank card.
- Explain that you may have entered details on a fraudulent website.
- Ask the bank to secure your account or card and advise you about unauthorised transactions.
- Review recent transactions and report anything you do not recognise.
- Change any affected passwords, especially if you reused them elsewhere.
Contacting your bank promptly may improve your chances of stopping or recovering a payment, although recovery is not guaranteed.
If you entered a password
Change the affected password using the service's official website or application. If you reused that password for other accounts, change it there as well. Enable multifactor authentication where available. If the password belongs to your email account, secure that account promptly because email can be used to reset access to other services.
If you downloaded or installed an application
If you installed an application from a suspicious link, take the situation seriously. Stop using the suspicious application, avoid using the affected phone for banking until you have assessed the risk, and use a trusted device to contact your bank if you suspect financial information may be exposed. Seek reputable technical assistance to assess and remove malicious software. Simply deleting an application may not resolve every security problem.
5. How to protect your smartphone from phishing
Your phone is often the gateway to your email, online shopping, banking and social media accounts. Protecting it is an important part of protecting your personal information.
Keep your phone updated
Install operating-system and security updates when they become available. Updates can address known security weaknesses. Where practical, enable automatic updates.
Use a screen lock
Set a strong passcode and enable biometric protection, such as fingerprint or facial recognition, if your device supports it. A screen lock helps protect your information if your phone is lost or stolen.
Download apps from trusted sources
Use the official app store for your device and check the application developer before installing anything. Avoid applications offered through unexpected texts, emails or unfamiliar websites.
Use unique passwords
Do not reuse the same password for banking, email and shopping accounts. A reputable password manager can help you create and manage unique passwords.
Turn on multifactor authentication
Where available, use an additional authentication step to protect important accounts. This can make it harder for someone to access an account with a password alone.
Back up important information
Keep a recent backup of important photos, contacts and documents. A backup can help you recover information if your phone is damaged, lost or needs to be reset following a security incident.
Review app permissions
Periodically check which applications can access your location, contacts, camera, microphone and other sensitive information. Remove permissions that an application does not need, and uninstall apps you no longer use.
These are general security recommendations rather than guarantees that a device cannot be compromised. Good security habits reduce risk, but no single setting can prevent every scam.
6. How to report a scam text in New Zealand
Forward the message to 7726
New Zealand's Department of Internal Affairs operates the free 7726 text-reporting service for suspicious messages. Follow the reporting instructions and forward the scam text to 7726. You may receive a reply asking for the sender's number.
Report the incident to Netsafe
If you need advice about an online scam or its consequences, visit Netsafe. Netsafe provides guidance and support for people in New Zealand dealing with online harm and scams.
Contact your bank if money or financial information is involved
If you have provided financial information or made a payment, contact your bank immediately. Do not wait for a response from the scammer or assume that a small payment is harmless. You can also consult New Zealand Consumer Protection's scam guidance.
7. Buying a new phone? Don't forget security support
A smartphone is more than a camera and a way to send messages. It stores personal information, provides access to online accounts and may be used for banking, shopping and identity verification.
When choosing a new phone, consider more than its price and specifications. Look for:
- Ongoing operating-system and security updates.
- A screen lock and supported biometric security features.
- Compatibility with the applications you use.
- Enough storage for your everyday needs.
- A manufacturer with a clear security-update policy.
An expensive phone is not automatically safer than an affordable one. What matters is the device's software support, update history and how you use it.
If you are comparing devices, explore the IT FOX SOLUTIONS Phones & Smartphones collection.
Final thoughts: Stop, check and protect yourself
Fake parcel delivery texts are designed to look convincing and encourage you to act quickly. You do not need to become a cybersecurity expert to protect yourself. A few simple habits make a difference:
- Do not click unexpected delivery links.
- Verify parcel details independently.
- Never enter payment details on an unverified website.
- Keep your phone and applications updated.
- Contact your bank immediately if you share financial information.
- Report suspicious messages to 7726.
The most important rule is simple: never let an unexpected text message rush you into giving away your personal or financial information.
Stay alert, keep your devices updated and make checking a message part of your online shopping routine.
Your tech. Your way.
IT FOX SOLUTIONS — helping New Zealanders make informed technology decisions.