If you’re asked to pay unexpected fees through a link in a text message, verify the request using the courier’s official website or customer service before entering any information.
How to Protect Yourself
Simple habits can help prevent these scams.
Track packages using the retailer’s official website or app.
Visit courier websites by typing the address yourself instead of using links in unexpected messages.
Enable transaction alerts through your bank.
Never enter payment information on websites reached through unsolicited text messages without verifying them first.
Report suspicious messages to your mobile carrier or the impersonated company when possible.
Delete phishing messages after reporting them.
A few extra minutes of verification can prevent weeks of financial recovery.
Frequently Asked Questions
Are all package delivery text messages scams?
No.
Legitimate delivery companies do send tracking updates.
However, if a message asks for unexpected payments or personal information, verify it through the company’s official website or app before taking action.
What is “smishing”?
Smishing is a form of phishing that uses SMS or text messages instead of email to trick people into revealing sensitive information or visiting fraudulent websites.
What should I do if I entered my card details?
Contact your bank or card issuer immediately using its official contact information.
They can block your card, monitor for fraudulent activity, and advise you on the next steps.
Final Thoughts
I thought I was solving a delivery problem.
Instead…
I handed my payment information to criminals pretending to be a courier company.
The text looked genuine.
The website looked professional.
The payment amount looked harmless.
Everything had been carefully designed to earn my trust.
The lesson I learned was simple.
Never trust a delivery text simply because you’re expecting a package.
Verify first.
Click later.
Because the next message in your inbox could be from a delivery company…
Or from a hacker pretending to be one.
About the Author
Jackson Godwin is a Cybersecurity Consultant specializing in Vulnerability Assessment and Penetration Testing (VAPT), Governance, Risk and Compliance (GRC), ISO/IEC 27001, PCI DSS, Cloud Security, AI Security, and Digital Risk Management.
Through JacksonTechnology.com.ng, he publishes cybersecurity awareness stories, ethical hacking tutorials, compliance guides, and practical online safety advice to help individuals and organizations recognize phishing attacks, online shopping fraud, payment scams, ransomware, identity theft, AI-enabled scams, and other emerging cyber threats.
His mission is to make cybersecurity practical, relatable, and accessible—one cyberstory at a time.
