Parcel delivery text scams

How it works

The text says a parcel couldn’t be delivered, is held at a depot, or needs a small customs or redelivery fee, often just a few dollars. The link goes to a site that looks like NZ Post or another courier. The small fee is bait. The scammer is after your card details, which are then used for larger purchases, or a one-time code that adds your card to the scammer’s phone wallet.

The Department of Internal Affairs has repeatedly named NZ Post among the organisations impersonated in New Zealand’s large text scam campaigns.

How to tell

• You get it whether or not you’re expecting a parcel. Scammers send millions; some recipients happen to be waiting for something.
• A link to pay a fee. Couriers don’t normally text you a payment link for redelivery.
• The web address is wrong. Look carefully before you tap.
• A request for a code. If you’re asked to enter a code your bank has texted you, stop. That code authorises something.

What to do

• Don’t tap the link. Check the delivery using the tracking number from the shop you bought from, in the courier’s official app or website.
• Forward the text to 7726. It’s free.
• If you entered card details, call your bank immediately and ask it to cancel the card.
• If you entered a code, tell your bank, because it may have added your card to a device.