High riskDelivery

DHL Text Scam

This scam sends a fake DHL message about a held parcel or unpaid customs fee, pushing you to a phishing page that collects your card and personal details.

Quick verdict

Risk level
High risk
Scam type
Delivery impersonation scam
Main red flag
An unexpected DHL text asking you to pay a small fee or confirm details through a link.
What to do first
Do not tap the link. Check any shipment using the official DHL website or app and the real tracking number.

What to know first

This scam sends a fake DHL message about a held parcel or unpaid customs fee, pushing you to a phishing page that collects your card and personal details.

Delivery scams (a form of smishing) impersonate couriers with a believable small problem, an unpaid fee, a wrong address, a held parcel, timed to arrive when you might be expecting something. The link leads to a cloned courier site that harvests your card details and a bank one-time code.

The core pattern to watch for is clear: An unexpected DHL text asking you to pay a small fee or confirm details through a link. Do not tap the link. Check any shipment using the official DHL website or app and the real tracking number.

Related tricks worth knowing: the Fake Customs Fee Text and the Fake Delivery Text Scam. For the wider picture, browse the Delivery & Postal Scams guides or run the message through our scam checker.

Scam statistics

#2
fake package-delivery texts were the second most-reported text scam in 2022
$330M
reported lost to text-message scams in the US in 2022

Tell-tale red flags

  • A delivery or customs message when you are not expecting an international parcel
  • A small 'customs', 'handling', or 'redelivery' fee demanded through a link
  • A link that does not lead to the official dhl.com domain
  • Urgent wording warning the parcel will be returned or destroyed
  • A request for card or personal details to release the package

Staying safe

  • Do not tap the link or enter any details
  • Check the tracking number directly on the official DHL website or app
  • Forward the text to your mobile provider's spam reporting service if available
  • Delete the message and block the sender

How it usually reads

Example pattern, not a real report
Example pattern: 'DHL: Your package is held at our depot due to an unpaid customs charge of £2.99. Pay now to release it: [suspicious link]'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

What to notice: An unexpected DHL text asking you to pay a small fee or confirm details through a link.

Steps if you already acted

  • Do not enter any further information on the page
  • If you entered card details, contact your bank to flag or freeze the card
  • Change the password for any account where you reused that login
  • Watch your statements for unexpected charges

Common mistakes

  • Do not reply to the message
  • Do not share any verification codes you receive
  • Do not install any app the link suggests

Scams like this one

Your questions answered

Does DHL ask for customs fees by text?
Genuine customs charges can usually be confirmed and paid through the official DHL site or app. A small fee demanded through a text link, with urgent wording, is a common scam pattern.
I am expecting an international parcel, so is the text real?
Scammers rely on this. Even when you are expecting a delivery, check the tracking number on the official DHL site rather than using the link in the message.
What if I already paid the fee?
Contact your bank straight away to report the payment and protect your card. Acting quickly improves the chance the charge can be stopped or disputed.
How can I report a DHL text scam?
You can report it to your mobile provider, to DHL through its official fraud or report-a-scam page, and to your national anti-fraud centre.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.