The fake delivery person and fake customer service: the gateway to phishing

The fake delivery guy scam (or smishing parcel) is phishing that impersonates a carrier — La Poste, Colissimo, Chronopost, Mondial Relay — or a large merchant site like Amazon. By SMS or telephone, it asks for a small “delivery fee” to collect your banking and personal details. This data is then used for fraudulent debits, and often fuels a second attack: the call from a fake bank advisor, made credible by the information you have just entered.

How the scam works, step by step

1. 1
   The bait message — “your package is waiting”

   An SMS or a call announces a blocked package: incomplete address, customs fees, full relay box. The message is sent to tens of thousands of numbers — statistically, many recipients are actually expecting delivery, making the bait credible without any targeting.

2. 2
   The fake site — a perfect copy of the carrier

   The link leads to a replica of the official site: logo, colors, fake tracking number. Only the web address differs — often by a letter or an extension (“laposte-suivi.info” instead of laposte.fr). On mobile, where the address is barely visible, the difference easily goes unnoticed.

3. 3
   Collection — €1.95 which is very expensive

   The fake site demands a pittance – €1 to €3 “redelivery fees”. The amount is calculated so as not to arouse distrust. In reality, it is not the €2 that the fraudster is interested in: it is the full card number, the expiry date and the cryptogram that you have just entered, as well as your name, address and telephone number.

4. 4
   Exploitation — fraudulent debits or resale of data

   In the days that follow, the card is used for online purchases, or the data is resold. Fraudsters sometimes test the card with small, discreet debits before moving on to larger amounts.

5. 5
   The bounce – the call to your bank’s “fraud department”

   This is the most dangerous step. A few days later, a “bank advisor” calls: suspicious transactions have been detected – he knows it, he is the one who made them. With your personal data, it is perfectly credible and guides you towards the validation of operations which empty your account. The little SMS package was the preparation of fake bank advisor.

The 5 warning signs to know

A legitimate delivery message never asks for money. Everything else is verified in thirty seconds.

• You are charged a fee to deliver or re-deliver a package. Shipping costs are paid when ordering, never afterwards by SMS. This request alone is the sign of the scam.

• The link does not point to the official website. “laposte-relivraison.com”, “chronopost-suivi.net”… The real domains are laposte.fr, chronopost.fr, amazon.fr. If in doubt, do not use the link: type in the official address yourself.

• You're not expecting a package — or the message doesn't cite a specific carrier or verifiable tracking number. Generic messages (“your package”, without reference) are sent en masse, blindly.

• A “customer service” calls you for a refund or an order problem. Amazon and major merchant sites almost never call spontaneously. A call that asks for your bank details “to reimburse you” is a scam: a reimbursement never requires your cryptogram.

• Shortly after entering your card somewhere, “your bank” calls you. This timing is not a coincidence: it is the planned continuation of the scam. Hang up and call your bank yourself at the number on the back of your card.

What to do if you are a victim?

If you entered your bank card on a fake delivery site, act the same day:

1. File an objection immediately. From your bank (number on the back of the card) or via the interbank opposition server on 0 892 705 705, available 7 days a week.
2. Monitor your accounts and dispute any unknown charges. For unauthorized card payments, the bank must in principle reimburse the contested transactions without undue delay (article L.133-18 of the Monetary and Financial Code).
3. File a complaint from the police or gendarmerie, or online for bank card fraud via the service Percival (service-public.fr).
4. Report the SMS to 33700 (just forward the message) and the scam on cybermalveillance.gouv.fr.
5. Stay alert in the following weeks. Your details are now stored with fraudsters: expect calls from “your bank” or other “customer services”. Never validate an operation requested by telephone.

How Kin-Guard detects this scam

The telephone part of this scam – the fake customer service who calls, the fake advisor who “calls back” after the SMS – always goes through an unknown number. Kin-Guard responds for your loved one, identifies the caller and their reason, and recognizes patterns of fake customer service: unexpected refunds, fees to be paid, bank details requested over the phone. The call is blocked before the scenario begins, and you are warned of the attempt.

Frequently asked questions

Article written by Charlie BART, founder of Kin-Guard. Published on July 7, 2026.

Sources: Cybermalveillance.gouv.fr — 2023 activity report · La Poste — Fraud alert · 33700 — Reporting fraudulent SMS and calls

Also read