A parcel text says your address is wrong. Here’s how to check safely

Expecting a delivery? Check the sender label, verify the order independently and know what to do if you have already shared payment or login details.

Edition · First published · Latest source review

Brown cardboard moving boxes stacked against a brown wall.
Kadarius Seegars / Unsplash · Illustrative stock photo of boxes, not a parcel involved in a reported scam. · Photo licence

A text about a failed delivery or an incorrect address can lead to a fake payment or login page. Before updating details or paying, check the order through a retailer or carrier app or website you open independently. If you have already shared money or sensitive details, act promptly to protect your accounts.

Who this is for: Students, graduates and other consumers in Australia checking delivery messages and protecting payment, identity and account details.

Expecting a parcel does not verify the message

Waiting for a textbook, replacement charger or online order can make a delivery notification feel convincing. A message says the courier could not deliver, your address needs correcting, or a payment is needed. Before doing anything in the message, check the order independently.

The National Anti-Scam Centre's December 2023 parcel-delivery warning describes messages that send people to lookalike sites to collect personal details or payment information. Urgency is part of the trap: a deadline makes the link feel like the quickest way to protect an order.

What the “Unverified” label tells you

Scamwatch's current SMS guidance explains that, from 1 July 2026, business and organisation texts should use branded sender IDs. Messages sent using unregistered sender IDs appear as “Unverified” and are grouped together. Treat that label with caution.

Use an independent check for requests for card details, passwords or verification codes, including texts with a familiar brand name. Follow Scamwatch's advice: open the organisation's genuine app or website yourself, or find its contact number separately.

A three-part check before you pay or update anything

1. Leave the message alone. Do not reply, follow its link, scan its QR code, download an attachment or install an app it suggests. A small requested payment is still a reason to stop and check.

2. Find the order independently. Open the retailer or carrier app you already use, or type the known website address yourself. Check the order and tracking details there. If you cannot identify the carrier, start with the retailer's genuine account or independently found customer-service contact.

3. Ask the right organisation about any mismatch. If the genuine tracking page shows a problem, use contact details found on its official website. Ask what action is actually required. Do not call the number inside the suspicious text to validate that same text.

The Australian Government's phishing guidance recommends trusted websites and known phone numbers rather than unexpected links or QR codes. Avoid treating a polished logo, plausible wording or an urgent tone as verification.

Already opened it or entered details?

Stop interacting with the sender and close the page. Write down what happened, including what you entered, downloaded or installed. The next steps depend on that information; do not keep filling out a form to see whether it becomes convincing.

If you entered card or banking details, shared a banking code, or sent money, contact your bank or card provider immediately through its official app or an independently found number. Tell it exactly what was shared and ask how to secure the account and whether transactions can be stopped. Do not wait for another message. Scamwatch's recovery steps explain why acting quickly matters.

If you entered a password, change it through the genuine service and change it anywhere else you reused it. Review important accounts for unfamiliar activity and turn on multi-factor authentication where available. If you installed software at the sender's direction, follow the government's recovery advice, including removing that software and scanning for malware. Seek technical help if you are unsure. Government scam-recovery guidance

Do not give passwords, card details or one-time codes to someone who contacts you unexpectedly to “fix” the delivery. Scamwatch's phishing guidance warns that these details can be used for fraud.

Keep evidence, report it, then watch for follow-ups

Save the message and relevant payment details before blocking or deleting it. Keep a short timeline of what you shared and who you contacted. Use the reporting options in the official recovery guides after taking urgent steps to protect your money and accounts.

Scamwatch points people who need identity support towards IDCARE, a free service that can help make a recovery plan. Be wary of anyone who approaches you offering to recover lost money: follow-up scams can create a second loss. Get help after a scam

One useful habit for your next order

Keep order confirmations and tracking references together, and check them through the retailer or carrier you independently open. If you share a household, ask whether someone else placed the order before responding to an unfamiliar delivery notification. A short check outside the message is more useful than racing its countdown.

Review and photo information

General information checked 29 October 2026 (Sydney). This is guidance on established scam methods, not personal financial or legal advice. If your money, identity or accounts may be at risk, contact the relevant provider promptly and follow current official recovery instructions. Recovery outcomes depend on the circumstances.

Photo: Kadarius Seegars / Unsplash. Original image, used under the Unsplash Licence, which permits free commercial reuse. Illustrative stock photo of boxes; it is not a parcel involved in a reported scam.

Image description: Brown cardboard moving boxes stacked against a brown wall.

Official sources