Legal information notice: this article provides general information and isn't a substitute for advice from a qualified lawyer.
“Your parcel is on hold. Update your address here.” A short SMS with a link arrives from a random number or a strange sender name. This guide is about recognising phishing SMS — the message itself — and what to do whether you ignored it, clicked, or typed something in. (For the WhatsApp version, and for payment-fee scams, see the linked guides.)
Some messages push you to download a file with an “.apk” extension, “to track your parcel”. Installing apps from outside the official store can give attackers access to messages and OTPs on your phone. Don’t install anything from a link in an SMS.
Don’t reply, don’t click, and don’t call any number in the message. Delete it after reporting.
Close the page and clear your browser history. Risk is lower, but stay alert for follow-up calls or messages.
Call your bank’s official number immediately, block the card, and report any unfamiliar debits in writing.
Uninstall it, turn off mobile data, change passwords from another device, and ask your bank to block UPI and net banking until it’s safe.
Use the Chakshu option on sancharsaathi.gov.in, and file on cybercrime.gov.in or call 1930 if you lost money or shared details.
If you’re really expecting something, open the shop’s or courier’s own app or type its address yourself. Don’t follow a link. A real parcel will show up in your account without your having to click anything in a message.
| Genuine | Phishing |
|---|---|
| Matches an order you placed, with a real tracking ID | Generic 'your package', no order detail |
| Link or app is the courier's or shop's official one | Shortened or odd link; asks you to install an app |
| Doesn't ask for card details | Asks for address update or a small fee with card details |
No. Chakshu, your bank, and cybercrime.gov.in are free.
Yes. A lawyer is only relevant if you lost significant money and your bank denies liability.
Need professional legal help with this?
Find a Lawyer on VidyodaySee the related guides on fake courier messages on WhatsApp, courier delivery payment scams, and the complete online shopping fraud guide.
Close the page, don’t return to it, and watch for follow-up contact. Risk is lower but not zero.
Scammers send in bulk from numbers or sender names that don’t match a real business.
An app file installed outside the official store; a malicious one can read your messages and OTPs.
Through Chakshu on sancharsaathi.gov.in, and on cybercrime.gov.in if money was lost.
It depends on speed and circumstances; report to your bank and 1930 immediately.
Use the tracking ID in the shop’s or courier’s official app, not the link in the message.
Yes, after reporting.
This article is for general information only and does not constitute legal advice. Scam messages change constantly — always verify through official apps and sites.
