# Holiday Parcel Texts: How to Spot the Fake Ones

Source: https://issitelegit.com/blog/holiday-parcel-texts-how-to-spot-the-fake-ones
Published: 2026-11-01 · By IsSiteLegit

**Do not tap the link in a surprise delivery text or email. Instead, open the courier's official app or type its real website into your browser, and look up your parcel with the tracking number from your order.** If you were not expecting a parcel, or you cannot match the message to an order, treat it as fake until proven otherwise.

## Why fake parcel notices peak in November and December

During the holidays, most of us are waiting on something. Scammers know this. A message saying "we missed you" or "your parcel is on hold" is easy to believe when you really do have orders on the way.

The scammer does not need to know what you ordered. They send the same message to huge numbers of people and wait for the ones who happen to be expecting a package.

For more on this scam, see our guide on [fake delivery and toll texts](https://issitelegit.com/guides/fake-delivery-and-toll-texts).

## Signs a parcel message is fake

No single sign proves it. Several together are a strong warning.

- **It came out of the blue.** You did not order anything, or you cannot tell which order it refers to.
- **It creates pressure.** Phrases like "act within 24 hours" or "your parcel will be returned" are meant to rush you.
- **It asks for a small fee.** Real couriers rarely ask you to pay by card through a text link. A "redelivery fee" is a common trick, and the real goal is to steal your card details.
- **It has no tracking number you recognise.** Real notices usually include one that matches your order confirmation.
- **It is vague.** Messages that say "Dear customer" and do not name the sender or the item are a red flag.
- **The link looks odd.** The address may contain the courier's name but end somewhere else, such as a made-up address like parcel-redelivery.example.
- **It asks you to reply to activate the link.** Some texts say to reply "Y" so the link becomes clickable. That is a trick to get around phone filters.

## What a real notice usually looks like

A genuine message usually matches something you did. It names the shop or the courier, gives a tracking number that appears in your order email, and lets you check progress on the courier's own site or app.

Even then, the safest habit is not to use the link. Go to the courier's real website yourself and enter the tracking number. If the parcel is real, you will find it there.

## How to look at a link before you tap it

Scam links often hide behind free hosting services, because anyone can publish a page there for nothing. In the phishing links listed by public security feeds on 2026-11-01, 71% were on such platforms, and the single biggest one was pages.dev. That does not mean those services are bad. It means a page can look unusual even when it carries a trusted-sounding name.

So read the part of the address just before the first single slash. That is the real domain. If a courier's name appears only at the start, like courier-name.something-else.example, the real site is the last part, not the courier.

Our guide on how to [check a link before clicking](https://issitelegit.com/guides/check-a-link-before-clicking) walks through this step by step.

## What a check can and can't tell you

A tool like IsSiteLegit looks at public signals: how old a domain is, whether it appears on security blacklists, whether the name imitates a known brand, and what the page says. We show you the evidence so you can judge for yourself.

There are limits. A brand-new scam site may not be on any list yet, and a clean result is never a guarantee of safety. Use a check as one input, along with your own common sense about whether you really expect a parcel.

## What to do if you already clicked or paid

Stay calm. Acting quickly helps.

1. **If you only clicked,** close the page and do not enter anything. Clear your browser history and run a security scan on your device.
2. **If you typed in a password,** change it right away on the real site, and anywhere else you used it. Turn on two-step login.
3. **If you entered card details or paid,** call your bank or card provider using the number on your card. Ask them to block the card and dispute the payment.
4. **If you downloaded a file or app,** disconnect from the internet, run a scan, and consider asking a trusted professional for help.
5. **Forward the text** to 7726, which is free in many countries, so your mobile provider can block the sender.
6. **Report it.** In the US, use [reportfraud.ftc.gov](https://reportfraud.ftc.gov). In the UK, use [Action Fraud](https://www.actionfraud.police.uk). In Australia, use [Scamwatch](https://www.scamwatch.gov.au).
7. **Watch your accounts** over the next weeks for charges or sign-in alerts you do not recognise.

## Check a site before you trust it

If a message sends you to a website and you are unsure, you can paste the address into the [IsSiteLegit checker](https://issitelegit.com/) for free and see the evidence before you enter any details.