Medium riskDelivery

Parcel Locker Scam

This scam sends fake parcel-locker notifications with a link or 'pickup code', aiming to phish your details, or tries to obtain your genuine locker code so a scammer can collect your parcel.

Quick verdict

Risk level
Medium risk
Scam type
Delivery impersonation (locker fraud)
Main red flag
A locker 'pickup' text with a link to verify details or a request to share your code.
What to do first
Do not share pickup codes or tap links; use the courier's official app to collect.

How this scam works

This scam sends fake parcel-locker notifications with a link or 'pickup code', aiming to phish your details, or tries to obtain your genuine locker code so a scammer can collect your parcel.

Delivery scams (a form of smishing) impersonate couriers with a believable small problem, an unpaid fee, a wrong address, a held parcel, timed to arrive when you might be expecting something. The link leads to a cloned courier site that harvests your card details and a bank one-time code.

In short, the giveaway is usually simple: A locker 'pickup' text with a link to verify details or a request to share your code. Do not share pickup codes or tap links; use the courier's official app to collect.

Scammers rotate tactics constantly, the same operation may also run the Fake Delivery Text Scam and the Address Confirmation Delivery Scam. See the full Delivery & Postal Scams guides hub, or test a suspicious message with the scam checker.

How to spot this scam

  • A locker notice you cannot match to a real order
  • A link to 'verify identity' before getting a code
  • A request to share your pickup code with anyone
  • A web address that is not the courier's official site
  • Pressure that the parcel will be returned

What the message looks like

Example pattern, not a real report
Example pattern: 'Your parcel is ready at the locker. Verify your identity to receive your pickup code: [suspicious link]' or 'Reply with your locker code to confirm collection.'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

What gives it away: A locker 'pickup' text with a link to verify details or a request to share your code.

The scale of it

#2
fake package-delivery texts were the second most-reported text scam in 2022
$330M
reported lost to text-message scams in the US in 2022

How to protect yourself

  • Use the courier's official app to view locker collections and codes
  • Never share your pickup code with anyone
  • Verify any delivery through official tracking
  • Report and delete suspicious messages

Already responded? Do this now

  • Do not enter personal or card details on the page
  • If you shared a code, contact the courier as the parcel may be at risk
  • Change passwords if you entered a login
  • Watch your statements if you entered card details

Mistakes to avoid

  • Do not share locker pickup codes
  • Do not verify identity through a text link
  • Do not assume the notice is real without checking

Related scams to know

Common questions

Should I ever share a locker pickup code?
No. Your pickup code is what releases the parcel. Sharing it could let a scammer collect your delivery. Use the courier's official app instead.
The text says I must verify before getting a code. Is that normal?
Genuine collections are handled in the courier's app. A link demanding identity verification before a code is a phishing sign.
I shared my code. What now?
Contact the courier promptly, as the parcel may be collected by someone else, and report the message.
How do I collect safely?
Track and collect through the courier's official app, keep your code private, and verify any unexpected notice directly.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.