Guide
Fake delivery link guide
“Your parcel is on hold — pay a small fee” texts are one of the most common scams in the Philippines. Here’s how to spot and stop them.
With so many of us shopping online, a “held parcel” text feels believable — that’s exactly why this scam works. The fee is small on purpose, so you pay without thinking. The real goal is your card or wallet details.
How the scam works
You get an SMS or email claiming a delivery is stuck and needs a customs, release, or redelivery fee. The link leads to a convincing fake courier page (J&T, LBC, SPX/Shopee Xpress, Lalamove, even BIR/Customs) that captures your card number, OTP, or GCash login.
“J&T: Your parcel is on hold due to an unpaid customs fee of ₱45. Pay within 24h to avoid return: jnt-redelivery-ph.com”
How to spot a fake delivery message
Warning signs
- You weren’t expecting a parcel — or can’t match it to a real order
- The link domain is misspelled or not the official courier (e.g. “jnt-redelivery-ph.com”)
- Asks for a fee, card details, or your OTP
- Comes from a random 09xx number, not an official sender ID
- Pressures you with a short deadline or “return to sender” threat
What to do instead — step by step
- 1Don’t tap the link. Open the courier’s official app or type their real website yourself.
- 2Track the parcel using the tracking number from your actual order confirmation.
- 3If you’re unsure a fee is real, contact the courier through their official hotline or app chat.
- 4Paste the suspicious link into TsekMuna to check the domain.
- 5Report the message to your telco (forward to 7726 / “SPAM”) and delete it.
Good habits that block this scam
What to do instead
- Legitimate couriers don’t collect fees through random SMS links
- Never enter card details or an OTP on a page you reached from a text
- Save the official courier apps and use only those for tracking
- Customs/BIR fees for personal parcels are handled by the courier, not via a personal link
If you already entered your details
- 1If you typed a card number: contact your bank immediately and block/replace the card.
- 2If you entered an OTP or wallet login: change your GCash/Maya MPIN and email password now.
- 3Watch for unauthorized transactions and dispute any you didn’t make.
- 4Enable app-level security (biometrics, login alerts).
- 5Report the fake link as a TsekMuna community report to warn others.
An OTP entered on a fake page can authorize a transfer in seconds — change your PIN and alert your bank/e-wallet right away.