Check the request independently of its link
The US Postal Inspection Service warns about unsolicited package-tracking texts that link to a request for personal or financial information. Its guidance says to visit USPS independently for tracking rather than following a suspicious message. This is USPS-specific advice, not a statement about every carrier’s notification system.USPIS: package-tracking text scams
Keep the message while you verify it, but open the carrier from an address or app you already trust. Compare the parcel reference, delivery event and any action shown there. Do not enter card details just because the message uses a familiar logo, mentions a small amount or threatens an immediate return.
Separate a possible charge from an authenticated request
DHL’s Cyprus fraud-awareness page describes legitimate duties-and-taxes payment requests and also warns about impersonation. Its guidance shows why “a message asks for a fee” alone cannot decide authenticity. It does not establish that every DHL-branded message or every fee request is valid.DHL Cyprus: fraud awareness and payment requests
Ask the named carrier to identify the charge, the shipment it belongs to and the official payment process. Keep any account statement or invoice reference beside the answer. If another party is collecting, ask who that party is and how the carrier confirms the arrangement before authorizing payment.
| Check | Use independent evidence |
|---|---|
| Shipment | Your own parcel reference and named carrier |
| Reason | An explanation of the charge and the party collecting it |
| Channel | The carrier’s official account or verified support response |
| Record | Amount, currency, invoice reference and receipt after payment |
Use a verified contact, not a reply from the message
Find support through the official carrier website or your purchasing account. Describe the request and ask for verification without sending your password or a sign-in code. Keep the complete reference private; a public post can show redacted wording if you only need help understanding a phrase.
Avoid testing an unfamiliar link with real account or payment details. If you are awaiting a parcel, check the real shipment for any deadline as well. Verification should resolve the request, rather than cause a legitimate action notice to be ignored indefinitely.
Act promptly if you already entered information
USPIS advises notifying your financial institution if you interacted with the suspicious URL, even without submitting the form. Follow the relevant institution’s instructions and the carrier’s official reporting guidance. This does not establish that your account has been compromised; it identifies the appropriate place to check the risk.USPIS: package-tracking text scams
Save the message, time and actions you took for a private report. Do not keep communicating with the sender to recover money or prove the message is real. Record the case reference from the official organization handling the report and follow its next instructions.