What are the red flags of this scam?

India Post and couriers do not send payment links by SMS to redeliver a parcel — they leave a notice or call • The SMS comes from a personal mobile number, not an official sender ID like INPOST-G • The link domain is not indiapost.gov.in — look for lookalikes like 'india-post-redeliver.in' or random short URLs • A tiny fee (₹25–50) is asked — scammers deliberately keep it small so you don't question it • After entering card details, multiple large transactions appear within minutes

What should I do if this happened to me?

Do not click. If you expect a parcel, track it directly on the official courier app or at indiapost.gov.in • If you already entered card details, call your bank's fraud helpline immediately and block the card • If you paid via card on the fake site, file a dispute or chargeback with your bank within 24 hours • If you installed any 'support' or 'server' or 'refund app' or remote-access app at the scammer's request (AnyDesk, TeamViewer, Quick Support, etc.), run free SeraphSecure (https://www.seraphsecure.com) to detect and remove it. • Report at https://cybercrime.gov.in or call 1930 (national cyber helpline).

HIGH delivery Last reported: 13 Oct 2026 Share

SMS says your courier delivery failed — click to update your address

Q: Is this a scam?

Yes. This is a documented scam pattern. An SMS says your parcel couldn't be delivered — click to update your address and pay ₹25. The link is a fake India Post or courier site that steals your card details. Large amounts are drained shortly after.

An SMS says your parcel couldn't be delivered — click to update your address and pay ₹25. The link is a fake India Post or courier site that steals your card details. Large amounts are drained shortly after.

Also known as: India Post delivery SMS scam, fake courier SMS phishing, DTDC delivery failure smishing, parcel redelivery fee scam

Already happened to you? Do this in the next few minutes

Call 1930 now

1 Call 1930 — the national cyber-crime helpline — right now. The sooner you report, the better the chance of freezing the money before it moves.
2 Call your bank to freeze the account and block the card immediately. Use the number printed on your card, never a number from the message or caller.
3 File a report at cybercrime.gov.in and keep every message, screenshot, and transaction ID.
! If you installed any "support", "server", "refund", or remote-access app at their request (AnyDesk, TeamViewer, Quick Support, etc.): disconnect the internet now, then run free SeraphSecure (https://www.seraphsecure.com) to detect and remove it.

What to do right now

1 Do not click. If you expect a parcel, track it directly on the official courier app or at indiapost.gov.in
2 If you already entered card details, call your bank's fraud helpline immediately and block the card
3 If you paid via card on the fake site, file a dispute or chargeback with your bank within 24 hours
4 If you installed any 'support' or 'server' or 'refund app' or remote-access app at the scammer's request (AnyDesk, TeamViewer, Quick Support, etc.), run free SeraphSecure (https://www.seraphsecure.com) to detect and remove it.
5 Report at https://cybercrime.gov.in or call 1930 (national cyber helpline).

Was remote-access software installed?

If a scammer asked you to install AnyDesk, TeamViewer, Quick Support, or any remote-access app, your device may still be compromised.

Run SeraphSecure to detect and remove it →

Red flags

⚠ India Post and couriers do not send payment links by SMS to redeliver a parcel — they leave a notice or call
⚠ The SMS comes from a personal mobile number, not an official sender ID like INPOST-G
⚠ The link domain is not indiapost.gov.in — look for lookalikes like 'india-post-redeliver.in' or random short URLs
⚠ A tiny fee (₹25–50) is asked — scammers deliberately keep it small so you don't question it
⚠ After entering card details, multiple large transactions appear within minutes

Known variants

APK-based address update (Oct 2026): scammer sends a malicious 'India Post Address Update' APK via WhatsApp instead of just a phishing link. Once installed, the APK requests Accessibility Services and intercepts OTPs and UPI PINs in real time, draining the account without any card input needed. Rajasthan Police advisory Oct 1, 2026.

Last seen: 10/13/2026

Already happened to you? Do this in the next few minutes

What to do right now

Red flags

Known variants

Sources