The fake courier SMS: "your package is held, pay the fee"
It's one of the most widespread scams around. It arrives by SMS, claims to be from a courier company, and asks for a small payment (a couple of euros/pounds) to "release a package". The real target isn't that small amount: it's your entire card.
COURIER: Your package is held at customs. Pay the £1.99 fee to receive it: https://courier-delivery.xyz
The 3 tell-tale signs
The domain isn't the real courier's. "courier-delivery.xyz", "parcel-tracking.info"… what matters is what comes right before the first "/". If it doesn't exactly match the courier's real official domain, it isn't them.
A small payment, and urgency. They ask for little money on purpose, so you don't think twice. Legitimate couriers never charge customs fees by SMS with a link.
You weren't expecting a package (and if you were, the real company already has your tracking on its official website).
Never pay through the link. The fake website copies the official design and will ask for all your card details. With those, they'll make much bigger charges.
What to do if it reaches you
Don't tap the link. Check it first by pasting it into Shield404's analyser (button above).
If you really are expecting a package, go yourself to the courier's official website and check with your tracking number.
Block the number and delete the SMS. In Spain you can also forward it to 7726, the free number for reporting fraudulent SMS.
Unmasking the link
If the message came by email, you can also analyse its technical headers to check whether the sender was spoofed.
What if I've already fallen for it?
Breathe. You can act, and the sooner the better. We have a step-by-step emergency guide: