Australia Post scam texts and emails: how to spot the fake parcel message

Quick answer

A message that claims to be Australia Post and says a parcel couldn't be delivered, an address is incomplete or a fee is due is a scam. Australia Post says it won't text, email or call to ask for payment or personal details. Don't reply or click. Track parcels in the AusPost app instead.

All scam alerts
Comes by
Text, Email, Phone call
Pretends to be
Australia Post
First reported
Latest official alert
(Australia Post)
Last updated

How it works

Scammers pretend to be Australia Post, which is a victim of this impersonation. Its scam alerts page describes a high-volume text campaign, first published in May 2025 and updated on 11 September 2026, sent by iMessage and RCS.

The message looks like it's from a delivery driver who couldn't find a safe place to leave a parcel. It sends you to a link to arrange redelivery or pick the parcel up. Variants Australia Post lists include "Update your correct address", "Shipment has been suspended due to missing house number" and "Incomplete updates will be returned to the sender".

Some messages ask you to reply with "Y" or something similar. Australia Post says that is a common tactic: replying can make your phone treat the sender as a trusted contact so later links get through its built-in protections.

The link leads to a fake Australia Post site built to steal your personal details and credit card information.

Red flags

  • A text about a parcel or delivery fee that you weren't expecting
  • A link to rearrange delivery, update your address or pay a fee
  • A request to reply "Y" to confirm or continue
  • A text that shows as "Unverified" or comes from an unfamiliar mobile number
  • A message that threatens to return your parcel unless you act now
  • A call, text or email asking for a password, card number or payment

Example message

Scam example Don't reply, call back or tap anything in a message like this.
Unknown number
Our driver couldn't find a safe place to leave your parcel. Update your correct address within 24 hours or it will be returned to the sender: [link]

What to do

  1. 1

    Don't reply or click

    That includes replying "Y". Australia Post says replying is a common trick to get links past your phone's protections.

  2. 2

    Check your parcel in the app or on the website

    Use the AusPost app or the tracking number on Australia Post's own site. Australia Post is removing links from its tracking texts and uses instructions to the site or app instead.

  3. 3

    Report it

    Send a screenshot to Australia Post's scam reporting mailbox, listed on its site, and use Apple's "Delete and Report Junk" or Google's "Block and report spam", then delete the message.

  4. 4

    If you entered card details, call your bank

    Use the number on the back of your card and ask them to block it and review recent transactions.

  5. 5

    If you gave personal details, get support

    IDCARE, a partner of Australia Post, offers free identity-theft support. Our guide on what to do after a data breach covers password resets and credit checks.

Report it

Serus

Check if your details are exposed with Serus

Scammers find your number and address on data brokers and people-search sites. Serus removes them.

Run a free scan

Why you got it

Scammers need a name, an email address or a mobile number, and they get those from data breaches and from lists of personal details that brokers collect and resell. The more places your details sit, the more of these messages land in your inbox.

Serus finds the data brokers that list your details and sends the removal requests, and it alerts you when your email or phone number turns up in a breach. That won't stop every scam message, but it gives scammers less to work with.

Official alerts

  1. Australia Post: High volume scam sent via iMessage and RCS ยท Australia Post

Frequently asked

Is Australia Post a scam?

No. Australia Post is the real national postal service. Scammers send fake messages in its name.

Will Australia Post text me asking for payment?

Australia Post says it won't call, text or email you to request payment, or to ask for personal or financial information.

How can I get genuine delivery updates?

Download the AusPost app and turn on push notifications. Australia Post says you can also turn off SMS notifications in your MyPost account so updates come only from the app.

What does an "Unverified" label mean?

Australia Post says to be extra careful with texts that show as Unverified or come from an unfamiliar number, and to check deliveries in the app or its help portal instead.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Related scams

All scam alerts

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.