Medium riskOnline Shopping Scams

Fake Tracking Update Scam

After placing an order, or sometimes out of nowhere, you receive an email or text styled as a retailer's own order-tracking update, often flagging a 'delivery exception' or 'parcel on hold'. A link leads to a page that mimics the shop's tracking area and asks for a small fee or your account login to 'release' the parcel. Unlike generic courier-impersonation texts, this version copies the retailer's branding and order flow, which can make a fake update look convincing if you are expecting a delivery.

Quick verdict

Risk level
Medium risk
Scam type
Order phishing scam
Main red flag
A tracking update asks you to pay a fee or log in through a link to 'release' or 'reschedule' your parcel.
What to do first
Do not use the link in the message, and instead check the order status by logging in to the retailer's site or app directly.

What this scam usually looks like

After placing an order, or sometimes out of nowhere, you receive an email or text styled as a retailer's own order-tracking update, often flagging a 'delivery exception' or 'parcel on hold'. A link leads to a page that mimics the shop's tracking area and asks for a small fee or your account login to 'release' the parcel. Unlike generic courier-impersonation texts, this version copies the retailer's branding and order flow, which can make a fake update look convincing if you are expecting a delivery.

Example message pattern

Example pattern — not a real report
Example pattern: 'Order update: your parcel is on hold due to a delivery exception. A small handling fee of just under one pound is required to release it. Update your order and pay here within 24 hours: [suspicious link]'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • The message asks for a payment, even a tiny one, to release, reschedule, or complete a delivery.
  • You are prompted to log in to your retailer account through a link rather than the official app or site.
  • The email or text creates urgency with a short deadline before the parcel is 'returned'.
  • The sender address or link domain does not match the retailer it claims to be from.
  • The update arrives for an order you did not place, or asks for details the retailer already has.

What to do

  • Open the retailer's official app or website yourself and check the order status there.
  • Compare the sender address and any link with the retailer's genuine domain before acting.
  • Treat requests for a small fee to release a parcel with suspicion, as legitimate orders rarely work this way.
  • If unsure, contact the retailer through the help details on its real site, not from the message.

If you already clicked or replied

  • Avoid entering card details or login information on the linked page and close it.
  • If you entered your retailer password, change it and update any account that shares it.
  • If you paid, contact your card provider quickly to ask about stopping or disputing the charge.
  • Watch your account and statements for further unexpected charges or login attempts.

What not to do

  • Do not pay a 'release' or 'handling' fee requested through a tracking link.
  • Do not log in to your retailer account from a link in an unexpected update.
  • Do not assume matching branding or your name in the message proves it is genuine.

Similar scams

Medium risk Email

Fake Amazon Order Email

This scam emails a fake order confirmation for an expensive item, hoping you click a link or call a number to dispute a charge you never made.
Medium risk Marketplace

Fake Shipping Label Scam

This scam targets sellers when a 'buyer' sends a prepaid shipping label or claims to have overpaid for shipping and asks for the difference back, or sends a fake label so the parcel is redirected. The underlying payment is usually fake or later reversed.
Medium risk Online Shopping

Order Cancellation Scam

After or even without a real purchase, you get an email or text saying there was a problem and your order was cancelled or needs payment re-confirmation. A link leads to a fake page built to capture your account login and card details.

Frequently asked questions

How is this different from a courier text scam?
Courier-impersonation texts usually pose as a delivery company. This version copies the retailer's own order-tracking branding and flow, so it can look like a familiar shop you actually bought from, which makes it easier to trust by mistake.
It mentions a real order I placed. Is it safe?
Not necessarily. Scammers sometimes time messages around shopping events, and details can leak. The safest check is to view the order directly in the retailer's official app or site rather than trusting the message link.
Why would they only ask for a tiny fee?
A small charge feels low-risk and is designed to capture your card details on a convincing page. Once entered, those details can be misused for larger transactions, so even a tiny fee is worth treating with caution.
How can I check my order safely?
Go to the retailer's website or app yourself, log in there, and view your orders. Avoid clicking the tracking link in the message, since genuine order status is always visible in your own account.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.