Is Dit Veilig?Scam type
Scam type 6/15

SMS from PostNL or DHL about a parcel? Nine out of ten are fake

Parcel smishing from PostNL, DHL and DPD exploded in 2025. Here's how to recognize the fake messages and what to do if you've clicked.

Stats and sources
Updated: May 2026

What the numbers show

No guesses. Only published data from Fraudehelpdesk (the Dutch fraud helpline), CBS (Statistics Netherlands), AFM, SIDN and Dutch investigative journalism.

PostNL/DHL smishing is one of the fastest-growing phishing categories in the Netherlands (per Fraudehelpdesk and police).
1
In 5 Dutch residents receives a parcel-smishing at least monthly, per Alert Online 2024.
Losses per victim run up to several thousand euros via credit-card abuse after they fill in details on the fake payment page.
Modus operandi

How does this scam actually work in practice?

Step by step: this is how scammers build the scenario. The faster you spot the pattern, the sooner you can hang up or click away.

  1. 01
    SMS, iMessage or WhatsApp claims a parcel could not be delivered because of an "unclear address", "outstanding delivery fees" or "customs fees".
  2. 02
    The link leads to a fake PostNL/DHL page, often via a redirect (qrco.de, bit.ly, or a not-quite-PostNL domain like postngl.buzz).
  3. 03
    On the page you enter address details, then credit-card details "to pay €1.99".
  4. 04
    Those credit-card details are then used for larger transactions; sometimes the card is added to Apple Pay/Google Pay.
  5. 05
    Increasingly the phishing SMS lands in the same conversation thread as real PostNL messages (sender-ID spoofing).
  6. 06
    Domains are often registered 1-3 days before a campaign and offline shortly after.
Red flags

How do you spot this scam before it's too late?

One red flag is usually enough. Two and you know for sure something is off. Stop, hang up, click away, call the real organization via a number you look up yourself.

PostNL never asks for delivery or customs fees via SMS.
The link is not postnl.nl, dhl.nl, dpd.nl or ups.com.
There's a typo, odd accent or strange hyphen in the domain.
The amount is small (€1.79, €2.99)
designed to lower your suspicion.
Time pressure: "pay within 24 hours or the parcel will be returned".
You're not expecting a parcel at all.
What to do

What to do if you've been targeted

In this order. Time is money — literally. The faster you call, the bigger the chance the bank can still reverse a transaction.

  1. 1
    Don't click. Delete the message or report it as spam.
  2. 2
    Forward a screenshot to valse-email@postnl.nl, or report DHL via dhl.com/nl-nl/home/footer/fraud-awareness.
  3. 3
    Track your parcel only via the official PostNL app or postnl.nl/tracktrace.
  4. 4
    Filled in credit-card details? Call your credit-card company immediately and have the card blocked.
  5. 5
    Report the phishing URL to valsemail@fraudehelpdesk.nl and via politie.nl/meld-online-fraude.
  6. 6
    Enable an anti-phishing code in your PostNL account (postnl.nl/phishing).
Examples from our database

Concrete examples of this scam type

Click through on an example to see the full dossier: feed hits, host info, domain age, related cases.

Common search queries

What people Google when they run into this scam

Recognize your own situation in one of these phrases? Paste your input into the checker above and you'll get an instant dossier — no account needed.

Common questions

Common questions about this scam

What is sms from postnl or dhl about a parcel? nine out of ten are fake?
SMS, iMessage or WhatsApp claims a parcel could not be delivered because of an "unclear address", "outstanding delivery fees" or "customs fees". The link leads to a fake PostNL/DHL page, often via a redirect (qrco.de, bit.ly, or a not-quite-PostNL domain like postngl.buzz).
PostNL SMS parcel arrived is this real?
PostNL never asks for delivery or customs fees via SMS. Don't click. Delete the message or report it as spam.
DHL SMS customs fees pay fake?
The link is not postnl.nl, dhl.nl, dpd.nl or ups.com. Forward a screenshot to valse-email@postnl.nl, or report DHL via dhl.com/nl-nl/home/footer/fraud-awareness.
PostNL clicked on link scam?
There's a typo, odd accent or strange hyphen in the domain. Track your parcel only via the official PostNL app or postnl.nl/tracktrace.
What should I do if I've been a victim?
Don't click. Delete the message or report it as spam. Forward a screenshot to valse-email@postnl.nl, or report DHL via dhl.com/nl-nl/home/footer/fraud-awareness. Track your parcel only via the official PostNL app or postnl.nl/tracktrace.
Will I get my money back?
Whether you get your money back depends on the type of scam, how quickly you called your bank and whether you handed over credentials yourself. Dutch banks operate a goodwill scheme but in practice rarely pay out 100%. Always file a police report immediately and report to the Fraudehelpdesk — this strengthens your case.