Treat an unexpected delivery message as a request to verify, not an instruction to act. Close the message, open the shopping or courier service yourself, and check the shipment there. This guide separates ordinary delivery questions from demands for money, credentials or secrecy, with a practical response for each situation.
The patterns below draw on India Post's phishing guidance, FedEx India's fraud advisory and the Home Ministry's parcel and digital-arrest alert. Every example message in this article is invented for illustration. None is a real company quotation, a verified individual incident or a link you should visit.
The address-update link
Illustrative example: “Delivery paused because your house number is incomplete. Update your address through the attached link before the parcel is returned.” The useful question is not whether the message sounds plausible. It is whether your independently accessed order or courier record shows an address problem for a shipment you recognise.
India Post explains that phishing messages can imitate trusted organisations and lead to false websites requesting personal or login information. Its guidance also describes the use of personal details to gain trust. A familiar name or an accurate address fragment therefore deserves verification, not automatic acceptance.
Do not correct the address inside the message's website. Open the original retailer app and compare the order number, courier and dispatch details. If the order genuinely needs correction, ask support through that independently opened account how to proceed. If you cannot identify a matching order, leave the message unanswered while you check with anyone who may have sent you a parcel.
The small redelivery fee
Illustrative example: “Your delivery attempt failed. Pay a small redelivery charge now to reserve tomorrow's slot.” Do not decide whether to trust the request by the size of the fee. Before paying anything, establish which shipment it concerns, why the charge exists and where that charge appears in an independently verified record.
FedEx identifies urgent, unexpected payment requests for package delivery and requests for financial information as warning signs. Our practical response is to stop before entering card details or approving a payment. Ask the courier through its own support channel to confirm the charge and payment route.
Keep a screenshot of the message, including its sender and time. Do not make a test payment to see whether the site works. If you already entered payment information, move to the reporting steps below instead of continuing through additional verification screens supplied by the sender.
Customs fees: verify rather than assume
Illustrative example: “Customs clearance is blocked. Transfer the duty immediately or your parcel will be destroyed.” Ask for the shipment reference and verify it separately. Do not let a threat substitute for an invoice, a recognisable shipment or a confirmed explanation of the charge.
A customs-related message is not automatically fraudulent. FedEx explains that missing paperwork or clearance instructions can hold a shipment. Its India duties-and-taxes page also describes genuine payment notifications through email and WhatsApp or SMS. Independently confirm the air waybill, invoice and authorised payment process; avoid blanket rules claiming couriers never send payment messages.
Parcel-held calls and digital-arrest escalation
Illustrative example: “A parcel in your name contains prohibited goods. Stay on the line while we transfer you to an investigating officer.” A second voice, uniform or official-looking background should not change your verification method. End the interaction and seek help independently instead of following the caller into another app.
The Home Ministry's alert describes criminals alleging that a parcel contains illegal items, demanding money and keeping victims on video calls. It also describes imitation police offices and uniforms. FedEx's India advisory documents the fake courier-to-law-enforcement transfer pattern.
Do not transfer money to prove innocence or remain alone on a call because the caller demands secrecy. Tell a trusted person what happened. Write down what was said without restarting the conversation to collect more evidence. Use independently obtained police or cybercrime reporting channels, rather than a number or link supplied by the caller.
A shipment check you can repeat
- Open your original shopping account or ask the genuine sender for the dispatch reference. For India Post, use the consignment field under Track and Trace on its official website.
- Compare the courier and shipment reference with your original order. Use the courier's own website or an app you already obtained through its official channels.
- Read the status without using the suspicious link. If anything is unclear, locate support from the official site and ask a narrow question about that shipment.
- Ask whether an address change, document or payment is actually required. Request instructions through the verified account or support channel.
- If the records do not match, stop. Do not provide extra personal information to help the unknown sender find a supposed parcel.
For postal enquiries, start with India Post's contact page. Its separate banking security advisory warns against messages and calls seeking passwords or one-time banking passwords. Keep banking authorisation codes separate from any legitimate delivery process; read what an OTP actually authorises before using it.
Report suspicious communications through Chakshu
Use Chakshu on Sanchar Saathi for suspected fraudulent calls, SMS or WhatsApp messages. The Department of Telecommunications announcement distinguishes this reporting facility from the route for people already affected by cybercrime or financial fraud.
On the Chakshu page, choose how the message reached you, pick the suspected fraud category, add the date, time and a screenshot, and confirm with the OTP sent to your own number. The page asks you to report within 30 days for action, so report promptly and follow the live form's instructions. We checked the published page; no report was submitted during this review.
Save the original message before blocking the sender. In your description, distinguish what you observed from what you suspect: “The message asked me to pay through this link” is clearer than asserting a person's identity without evidence. Do not forward an active suspicious link to family as a warning; share a redacted screenshot instead.
If you paid or exposed banking details
Contact your bank immediately through its official app, website or card contact details and explain what you disclosed or authorised. Ask what needs blocking and how to record the transaction dispute. HDFC Bank's security guidance provides official reporting and account-protection advice; use your own bank's corresponding channel.
For financial cyber fraud, call 1930 promptly and report through cybercrime.gov.in, as directed in the DoT guidance. Prepare the transaction reference, time, amount, recipient details, message and screenshots. Keep bank and cybercrime acknowledgement numbers together. Do not delay reporting while trying to assemble a perfect evidence file.
Quick checklist
- Did I independently identify the shipment and courier?
- Have I checked through the original order or official tracking page?
- Is the sender demanding money, credentials, an app installation or secrecy?
- Have I saved the message without opening its link again?
- Have I chosen Chakshu for suspicious communication, and the bank plus cybercrime reporting route if affected?
For payment-request mechanics, read our UPI safety guide. For an ordinary unresolved delivery or refund dispute, use the consumer complaint guide.
Sources
Official advisories checked on 15 October 2026. Examples are illustrative. Reporting does not establish that a particular sender has committed an offence or guarantee recovery.
