Parcel messages
Zavialov Ilia Nikolaevich takes apart the parcel stuck in customs message, step by step
A text lands on a Tuesday morning saying a parcel is held at customs and a small fee will release it. The sum is low enough to pay without thinking twice, and the page behind the link carries a tracking bar, a map and a familiar looking logo. This article follows the parcel stuck in customs message from the first notification to the moment the card details are used somewhere else entirely. The question worth answering is why a scheme built on such a tiny charge pays at all.
The size of the fee is the whole design
Every part of the parcel stuck in customs message is chosen to sit under the level at which a person stops and checks. A charge worth less than a sandwich raises no alert from the bank, prompts no call to a partner and leaves no room for second thoughts. The people running the page have very little interest in the money itself. What they are buying with that charge is a card number typed in willingly, with the expiry date, the security code and the billing address arranged neatly beside it.
A small sum also survives being sent to the wrong person. Someone with nothing on order may still assume a relative posted a birthday present, or that a marketplace seller used an unfamiliar courier. The fee is low enough that paying it feels cheaper than working out whether the parcel exists at all. That tolerance is exactly what the wording is built to produce.
The pattern shows in the figures. Losses from schemes that begin with a text message reached 470 million dollars during 2024, five times the level recorded in 2020, and that rise happened while the number of reports was falling. Fewer people are being caught, and every one of them is now worth considerably more to the sender than before.
Why customs is the pretext that works here
Ordering from abroad genuinely can end with a charge collected before the parcel is handed over, and most households have met one. The story therefore has to teach the reader nothing new, which is the point of choosing it. It borrows a real procedure that already feels opaque, bureaucratic and mildly irritating, and nobody enjoys a handling charge enough to examine it closely.
The wording follows a narrow recipe. There is no name, because the sender has none, and a reference number in roughly the right shape, because the shape is all that ever gets checked. There is a deadline, usually a return to sender if nothing is settled soon, and that supplies the pressure. And there is a link, shortened or truncated, which on a phone screen shows only its harmless first half.
The framing is well tested. A delivery problem is the single most common theme in fraudulent text messages, and during 2025 a customs variant was added to it, claiming the order has been stopped at the border and will not arrive until a fee is paid. The parcel stuck in customs message is simply the current edition of a pretext that has been refined over several seasons of use.
What the fake courier page is made of
The address bar is the first honest thing on the screen. A courier name usually sits inside a longer string, joined to a word such as parcel, redelivery or customs, and finished with a suffix that looks official at a glance. The page loads instantly because it is a handful of static files with nothing behind them. Opening the same link a day later often returns an error.
The layout is copied closely enough to pass a glance on a small screen. A tracking bar with three stages shows the middle one ticked, a map pins a depot near a plausible motorway junction, and a cookie banner sits at the bottom doing the quiet work of looking legitimate. A countdown reminds the reader that hesitation costs the parcel.
The form is where the design gives itself away. It asks for the delivery address, which any courier already holds, then for the card number, the expiry date and the security code from the back of the card. A phone number is marked as required for delivery updates. A genuine handling charge is settled inside the courier's own app or paid to the driver at the door, and releasing a parcel never requires a security code.
What happens to the card details in the following minutes
The details rarely wait. Fresh card numbers are tested within minutes against small purchases on unrelated sites, because a card that authorises once is known to be live while an untested number is not. The tiny fee on the fake page serves that same purpose, confirming the card is live before it travels further. From there the number moves in a batch to people who have no idea where it came from.
The security code and the phone number matter more than the balance. With those two pieces the next stage can start a payment wherever the card is accepted and then ask the cardholder directly for the one time code the bank sends. Everything on that form has a job, and none of those jobs involves moving a parcel.
There is also a slower use. The small charge sometimes reappears as a repeating one under a vague trading name that means nothing on a statement, and it runs quietly for months. Many people who reported paying a small redelivery fee later discovered the payment had existed only to collect their card details. That is the ordinary ending of the parcel stuck in customs message, and it arrives long after the text itself has been deleted.
The call that turns pennies into a real loss
A day or two after the payment the phone rings and the caller knows things. He names the small charge, the courier, sometimes the last digits of the card. That knowledge carries the whole performance, because a stranger who can quote a recent charge on the account sounds exactly like the fraud team he claims to speak for.
The request is always movement. Money should go to a safe account, a code should be read out, an app should be installed so the line can be secured. Payment fraud in the United Kingdom produced over 4 million confirmed cases in a single year, of which 3.81 million were unauthorised, and 66 per cent of authorized push payment cases begin online before anyone picks up a phone.
One rule survives every version of this call. A bank never asks a customer to move money to another account, never asks for a one time code and never needs remote access to a handset in order to protect it. Ending the call costs nothing at all, and the number printed on the back of the card reaches the same bank a minute later.
Where the chain can still be broken
The first break comes before the tap. Checking the parcel stuck in customs message against the order itself takes a moment: open the retailer's own app or account page and look at what is genuinely on its way. Every shop keeps that record, and it never lives inside a text message. If nothing is expected, the message has answered itself.
The second break is on the page. Reading the full address in the bar takes a moment on a phone, and a suffix with nothing to do with the courier settles the question. If a form asks for a security code to release a delivery, the charge is a purchase made for a stranger. Closing the tab at that point costs a parcel that was never there.
The third break is the hour after payment. Card details take time to travel, and a card frozen quickly is usually a card that never gets used. Reporting the text through the route the mobile provider offers takes seconds and removes the link for the next person who receives it. The fourth break is the follow-up call, and it breaks by being ignored.
If the fee has already been paid
The order of actions matters more than speed. Freeze or cancel the card first inside the banking app, since that closes the route the details were collected for. Then read recent statements for a repeating small charge under an unfamiliar trading name and cancel it with the bank directly. If a password was typed anywhere in that flow, change it on every account where it was reused.
The one time code is the line worth holding under any pressure. Card details on their own stop at the point where a bank asks for confirmation, and the person at the other end needs the cardholder to supply it. Nothing said during a call changes that, whatever job title is offered.
Reporting is worth doing even when no money moved. In four out of five imposter reports there was no financial loss at all, which shows how routinely these attempts fail and how many of them are sent. Each report about the parcel stuck in customs message helps the people who take these pages down find them while they are still running.
| Stage | What the reader sees | What the stage is for |
|---|---|---|
| Text arrives | A parcel held at customs and a small release fee | Winning a tap while the reader is busy |
| Link opens | A courier page with a tracking bar and a map | Borrowing trust from a familiar layout |
| Address step | A request to confirm the delivery address | Making the form feel routine before the card is asked for |
| Card step | Card number, expiry date and security code | Collecting a complete set of payment details |
| Payment | A small charge and a confirmation screen | Proving the card is live before it is passed on |
| Statement | A repeating charge under an unfamiliar name | Earning from the card until someone cancels it |
| Phone call | A fraud team that already knows about the charge | Turning a small loss into a transferred balance |
Questions and answers
What is the parcel stuck in customs message?
It is a text claiming a delivery has been held at the border and will be returned unless a small fee is paid. The link leads to a copy of a courier page whose only working part is the card form.
How do I know if a customs fee text is real?
Check the order in the retailer's own app or account page instead of following the link. A genuine handling charge is collected inside the courier app or at the door, and it never needs the security code from the back of a card.
I paid the small delivery fee, what should I do first?
Freeze or cancel the card in the banking app before anything else, then check recent statements for a repeating charge under an unfamiliar name. Change any password that was typed during the same session on every account where it was reused.
Can they take money if I only entered the card details and paid nothing?
Yes, because the details alone are enough to attempt payments elsewhere. The card should be treated as compromised from the moment the form was submitted, and canceling it is the fastest way to close that route.
Why is the fee in these messages always so small?
A low amount avoids bank alerts and feels cheaper than checking whether the parcel exists. The charge is there to confirm the card works and to capture the details, so the sum itself is almost irrelevant to the sender.
Someone from the bank called about the charge, is that genuine?
Treat any such call as part of the same chain, especially when it asks you to move money or read out a one time code. Hang up and dial the number printed on the back of the card, from another phone where possible.