A text says Australia Post could not deliver — pay a small fee to reschedule
A text pretends to be from Australia Post claiming a package needs a small "redelivery fee" or "customs duty" (usually $1-$4). The link leads to a fake auspost.com.au lookalike site capturing card details, then charging for a recurring subscription or reselling the card. Same crew rotates through Amazon, DHL, and StarTrack branding.
Also known as: fake Australia Post text, AusPost redelivery fee scam, auspost.com smishing, StarTrack parcel scam
Already happened to you? Do this in the next few minutes
- 1 Call your bank or card's fraud line right now. Use the number on the back of your card — not any number from the message or caller. Ask them to stop or reverse the payment and freeze the account.
- 2 If you paid by gift card, wire, or an app (Zelle, Venmo, Cash App): contact that company immediately and report it as fraud. Acting fast sometimes recovers the money.
- 3 Report to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov. The sooner, the better.
What to do right now
- 1 Do not tap the link. If you're expecting a parcel, check tracking directly at https://auspost.com.au — type the URL yourself
- 2 Forward the scam text to 0429 999 888 (Scamwatch's SMS reporting number) then delete it
- 3 If you already entered card details on a fake site, call your bank on the number on the back of your card and cancel the card
- 4 Check your bank statements for the next 3 months — some fraudsters resell stolen card details weeks later
- 5 Report to Scamwatch at https://www.scamwatch.gov.au/report-a-scam or ReportCyber at https://www.cyber.gov.au/report.
Red flags
- ⚠ Australia Post redelivery attempts are notified by a card left in your letterbox, in-app notification, or email — not by text asking for money
- ⚠ The fee is very small ($1.85, $2.99, $3.50) — deliberately low so you don't pause
- ⚠ The link is not auspost.com.au — it's a lookalike like 'auspost-au.com', 'aus-post-redeliver.com', or a shortened URL that hides the destination
- ⚠ The message urges action within 24 hours or the parcel is 'returned to sender'
- ⚠ After entering card details, the site also asks for date of birth, driver's licence number, or Medicare card number — none of which Australia Post ever needs
Known variants
-
Fake StarTrack or DHL text: same script, different logo. StarTrack (owned by Australia Post) is targeted because business shipments use it and recipients may not recognise the brand. DHL text hits international parcel expectations — especially active in November–December during the holiday shopping surge.
Last seen: 11/6/2026
Sources
- Australia Post — Report a scam
- Scamwatch — Package delivery scams
- ACSC / Cyber.gov.au — SMS phishing (smishing)
- Choice Australia — Scam alert on parcel delivery texts
- MailGuard — Australia Post parcel-held scam email harvesting OTP codes (2026)
- Jim's IT — Australia Post, Linkt and myGov scam text guide (2026)
- AFP — Christmas shoppers beware: silly-season delivery scam surge warning (October 2026)
- WA Consumer Protection Commissioner — Christmas shopping scam risks rise: $442k lost in 2026 (October 2026)