Phishing Delivery SMS with Fake Links
Verdict: Suspicious | Risk Score: 7/10 | Severity: high
Category: UPI, Phishing, OTP
How Phishing Delivery SMS with Fake Links Works
Overview: This scam targets Indian consumers through SMS messages that appear to be from reputable courier services or India Post. The message creates a sense of urgency, warning about a failed delivery, and instructs the recipient to click a link to resolve the issue. In reality, there is no order or delivery, and the link leads to a phishing site designed to steal banking or personal information. Given India's high volume of online shopping and low digital literacy in some groups, this method is particularly potent and widespread. How It Works: 1. The victim receives an SMS (e.g., from a number resembling 'India Post') stating that a parcel delivery failed due to incorrect address [ADDRESS_REDACTED]. 2. The SMS urges the recipient to click a link—often shortened or resembling official sites (like iydc[.]in)—within hours. 3. The fake site mimics courier or e-commerce interfaces, requesting personal details, card information, or an advance payment for "redelivery." 4. Once data is entered, scammers either siphon funds or use the information for further fraud (like taking out loans or hacking accounts). India Angle: Scammers leverage the popularity of UPI and OTP-based verification in India. They often target Hindi- and English-speaking urban users, government employees, and those in major metros. Messages reference India-specific platforms and mention local delivery brands. Real Examples: - An SMS reading: "Dear Customer, your parcel is held due to address issue. Click here to confirm delivery: [short URL]." - Users of multiple online marketplaces in Mumbai received a message: "India Post attempted delivery—update address [ADDRESS_REDACTED]." Red Flags: - Messages with urgent delivery problems for parcels you did not order - Links that do not match the official website address - [ADDRESS_REDACTED] - Threats of penalties or cancellations if you do not act within hours Protective Measures: - Never click on links in unsolicited SMS or enter OTP/banking info on suspicious sites - Check order status directly on the official app or website using your account - Delete such messages and block the sender - Educate family about SMS phishing, especially older relatives If Victimised: - Contact your bank and freeze your card or UPI account at once - Report the incident to the 1930 scam helpline and cybercrime.gov.in - Watch for suspicious transactions in the coming days Related Scams: - 'Smishing' texts using other government brands (Aadhaar, PAN) - Fake delivery update calls seeking one-time passwords (OTPs) - SMS promising customs clearance but asking for illegal fees
Visual Intelligence:
BharatSecure's AI has identified this as a used in scams targeting Indian users.
Who Does Phishing Delivery SMS with Fake Links Target?
General public across India
Red Flags — How to Identify Phishing Delivery SMS with Fake Links
- SMS urges clicking a suspicious link for delivery update
- Mentions parcels or orders you never placed
- Links are shortened or not from official courier domains
- Request for card, UPI, or personal data via the link
What To Do If You Encounter Phishing Delivery SMS with Fake Links
- Do not click any links or share personal information
- Block and report the sender immediately
- Report at cybercrime.gov.in or call 1930
- Inform your bank if financial details were shared
How to Report Phishing Delivery SMS with Fake Links in India
- Call 1930 — National Cyber Crime Helpline (24x7)
- File a complaint at cybercrime.gov.in
- Contact your bank immediately if money was lost
- Call RBI helpline: 14440 for banking fraud
Frequently Asked Questions
- What is Phishing Delivery SMS with Fake Links?
- Overview: This scam targets Indian consumers through SMS messages that appear to be from reputable courier services or India Post. The message creates a sense of urgency, warning about a failed delivery, and instructs the recipient to click a link to resolve the issue. In reality, there is no order or delivery, and the link leads to a phishing site designed to steal banking or personal information. Given India's high volume of online shopping and low digital literacy in some groups, this method
- How does Phishing Delivery SMS with Fake Links work?
- Overview: This scam targets Indian consumers through SMS messages that appear to be from reputable courier services or India Post. The message creates a sense of urgency, warning about a failed delivery, and instructs the recipient to click a link to resolve the issue. In reality, there is no order or delivery, and the link leads to a phishing site designed to steal banking or personal information
- How to protect yourself from Phishing Delivery SMS with Fake Links?
- Do not click any links or share personal information Block and report the sender immediately Report at cybercrime.gov.in or call 1930 Inform your bank if financial details were shared
- How to report Phishing Delivery SMS with Fake Links in India?
- Report to cybercrime.gov.in or call 1930 (National Cyber Crime Helpline). You can also contact your local police station's cyber cell.
Verify Any Suspicious Message
Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.