Fake Parcel Delivery SMS Scams in Singapore and How to Spot Them

Your parcel cannot be delivered because of an unpaid customs fee. Tap here to pay $2 and reschedule. The text looks like it comes from SingPost, Ninja Van, or Shopee, and the linked page carries the right logos and colours. But the parcel does not exist, the payment page harvests your card details, and the link may even try to install malware. Fake delivery SMS is one of the most common smishing scripts in Singapore, and it succeeds because online shopping makes the story believable. A few checks expose every fake.

The anatomy of a fake delivery text

The typical scam text has four parts: a trusted name such as SingPost, Ninja Van, J&T Express, Qxpress, Shopee, or Lazada; a problem such as a failed delivery, an incomplete address, or unpaid customs; a small fee that feels too trivial to question; and a link with a deadline. The phishing site behind the link mimics the courier's tracking page and payment form, collecting card numbers, one-time passwords, and personal details. Some variants skip payment entirely and push an app download that is actually spyware. Real couriers do not operate this way: they do not demand surprise payments through SMS links or distribute apps outside the official stores.

Check the sender, link, and story

Three quick checks catch most fakes. First, the sender: scammers exploit SMS Sender IDs with lookalike names, so a familiar display name proves nothing. Second, the link: preview it without tapping, and look for odd domains, misspellings, or URL shorteners instead of the courier's official domain. Never tap to find out. Third, the story: did you actually order something that this courier would deliver, and would a real courier resolve fees through a random text rather than its app or website? If any check fails, treat the text as hostile. When in doubt, ignore the link and open the retailer's or courier's official app to check tracking yourself.

Never pay or install through an SMS link

This is the golden rule of delivery texts: no legitimate parcel situation in Singapore is ever resolved by tapping an SMS link. Tracking lives in the official app or on the official website you navigate to yourself. Payments for duties or redelivery, on the rare occasions they are real, happen through official channels you can verify independently. And delivery apps come only from the official app stores, never from a link in a message. Any text that pushes you toward a link for payment or installation is, by that fact alone, not from the real courier.

What scammers do with a tapped link

Understanding the damage makes the caution concrete. Phishing payment pages capture card numbers and then request the one-time password, which lets scammers transact as you. Fake forms harvest names, addresses, and ID numbers for identity fraud or resale. Malicious downloads can spy on messages, including the one-time passwords your bank sends, effectively handing scammers your accounts. That is why even curious tapping is dangerous: some pages begin profiling your device on load. Do not tap, do not reply, and do not forward the link to friends to ask what they think; instead, verify through official channels.

Report, block, and delete

When a fake delivery text lands, handle it in this order. Screenshot the message including the sender and timestamp for evidence. Report it through the ScamShield app or at scamshield.gov.sg so the number joins the shared scam database. Alert the impersonated courier or platform through its official website or app, since companies like SingPost and Ninja Van track impersonation campaigns. Then block the sender and delete the message. If you tapped the link and entered details, call your bank's official fraud line immediately, change passwords, watch for unauthorised transactions, and file a police report.

Shop safe going forward

Reduce your exposure with a few habits. Track parcels only through official retailer and courier apps with notifications turned on, so genuine updates arrive in a channel you trust. Keep ScamShield's SMS filtering enabled so known scam texts are filtered before they ping you. Avoid posting your phone number publicly on marketplaces like Carousell. And share this script with older relatives, who order online more than ever and are prime targets for delivery impersonation. The fakes will keep coming, but a shopper who never taps SMS links is a shopper the parcel scam cannot catch.