Courier phishing
How to check a suspicious courier link
A scammer may send a page that copies a known delivery company and claim it is needed to receive payment, book collection or release a parcel. The real aim is often to capture financial credentials.
Warning signs
When to stop and verify
- The address contains a misspelling, extra word, unusual subdomain or unexpected domain ending.
- The page asks for card details so that you can receive money.
- The link came from a stranger during a marketplace conversation.
- The site threatens cancellation or uses a timer to force an immediate response.
- After the first form, it requests an SMS code or approval in your banking app.
Safer next steps
What to do before paying
- 1Do not use the link; type the courier's known address yourself or open its official app.
- 2Check the tracking number directly on the courier's official website.
- 3Do not provide card details merely to receive money from a buyer.
- 4If you submitted details, contact your bank immediately and follow its security instructions.
Evidence for a check
What to submit to VerifyBeforeBuy
A logo is not evidence that a page belongs to a courier. Check the exact domain, the purpose of the form and whether the shipment exists through a channel that the sender did not provide.
- The full URL as text
- A screenshot with personal data removed
- The message that introduced the link
- Courier name and claimed tracking number
Frequently asked questions
Clear answers
Does a courier need my card number to give me a buyer's payment?
Not for a normal marketplace sale. A request for full card details or banking access is a strong phishing indicator.
Is it safe just to open the link?
The main danger is usually the next step, but the page can still mislead you. It is safer to visit the courier independently.