bpost phishing: check a fake parcel SMS, email or sender

What you need to understand

• How to recognise fake bpost SMS messages or emails linked to a parcel, a post point or a micro-payment.

The scam, step by step

• The message makes use of the plausible expectation of a parcel. It says there is an incomplete address, a failed delivery or a small extra amount to pay.
• The link is generally not for tracking: it opens a fake bpost page designed to collect card details, identity details or bank validation.
• The information already entered can then be used during a follow-up call to make a fake adviser more convincing.

What the fraudster is trying to get

• Card details and bank validations.
• Contact details that allow a second, personalised scam.

Common variants

• Delivery fees of a few euros.
• Address to correct before a new delivery attempt.
• Fake delivery notice or fake collection point.

Warning signs in your case

• Unexpected micro-payment or fees
• External link to bpost.be
• Pressure to act quickly on the parcel

What a legitimate service would do

• A real shipment can be checked on bpost.be or in the app using the tracking number.
• bpost publishes its advice on recognising phishing on a dedicated page on its official domain.

Belgian context and fraud chain

• In Belgium, impersonating a transport company works because a recipient may genuinely be waiting for several deliveries handled by different companies. The fraudulent message does not need to know the parcel: it relies on the chance that a delivery seems plausible.
• The exact domain matters more than the logo. A page can reuse the colours, typography and visual tracking of bpost while being hosted elsewhere. The check must start again from bpost.be or from the app opened manually.

Decision points to check

• First look for a tracking number and check it in the official channel. A missing or invalid number, or one that does not match any shipment, strongly weakens the request.
• Compare the action requested with the actual status of the parcel. An address correction, a payment or a rescheduling that does not appear in the official tracking should not be carried out from the message.
• Read the beneficiary, the amount and the nature of any bank validation. A small amount mentioned in the SMS does not guarantee that the validation concerns the same amount.

How to check without taking a risk

• Do not reply to the message and do not use the link, QR code or number it contains.
• Open the official app or website yourself, then check whether the same request appears in your personal account.
• If in doubt, contact the organisation using a number found on its official website, a reliable bill or your bank card.

What to do immediately

• Open bpost.be or the official app yourself.
• Do not pay anything from the message received.

If you have already clicked, paid or replied

• Stop the exchange and do not try to negotiate with the sender of the message.
• Change the access details shared through the official service. Contact the bank immediately if a payment, a card, an IBAN or a validation is involved.
• Keep the exchanges, payment references and observed addresses for reporting, without publishing personal data publicly.

Reacting after an incident

• If only the page or link was opened, close it and delete any downloaded files without opening them. A simple click does not automatically mean theft, but you must watch what was entered or installed.
• If a card or bank validation was used, contact the bank immediately on its official number and ask which measures are suitable for the transaction actually carried out. Card Stop steps in when a card needs to be blocked.
• Keep the SMS, the domain, the time and the payment reference for reporting. Do not repost a screenshot that contains your address, parcel number or banking details.

Limits and level of proof

• A message containing the word bpost is not automatically fraudulent; conversely, the absence of mistakes and the presence of a real parcel number are not enough to prove it is genuine.
• StopArnaques can identify signs in the text and the link, but only the official tracking confirms the existence and status of the shipment.

Analysis grid for bpost fraud

• To examine a bpost fraud case, split it into four questions: who is contacting you, through which channel, what action is requested, and which independent element can confirm it. One reassuring answer does not make up for the other inconsistencies.
• The priority warning signs in this file are: unexpected micro-payment or fees; a link to a domain other than bpost.be; pressure to act quickly on the parcel. Their combination matters more than the isolated presence of a word, a logo or a mistake.
• Always compare the message with the real service status. For bpost fraud, a request that is absent from the app, the account or the official contact should remain unexecuted until confirmed.

When to ask for immediate help

• In a bpost fraud case, contact the relevant service without delay if a code, validation, payment, card, identity document or remote access has already been shared. Describe the exact action rather than saying only that you were hacked.
• If no sensitive action was taken, keep the useful elements, block the contact and use the detector to document the signs. This distinction avoids confusing prevention, a confirmed incident and a simple unsolicited message.

What to do now

• If you have not acted, do not click further and open the named service's official channel yourself.
• If you clicked, close the page, enter nothing else and note what information was shown or requested.
• If you shared a code, card, password or payment, contact your bank or the relevant official service immediately.
• Keep the message, time, link used and any useful screenshots. Share them only with an official reporting channel or a trusted helper.

Limits of this page

• This page does not prove that a message is safe and does not replace your bank, the police, Safeonweb, a platform or a public service.
• A scam may be new, very well written or described with too little context. Use the result as decision support, not as absolute certainty.
• Before taking a final action, checking through the official channel matters more than the appearance of the received message.

Check through an official channel

• Type the service address yourself or open the official app. Do not use a phone number, link or QR code from the suspicious message to verify the situation.
• When money, card details, a code or account access are involved, the safety action comes first. The analysis can then help organise the evidence.

How to read the result

• A low number of signals does not mean that everything is safe. It only means that this page or analysis did not find decisive evidence with the information available.
• Focus on the requested action: paying, sharing a code, installing an app, approving a bank action or leaving an official platform. That action matters more than a logo, sender name or polished wording.
• If the situation feels urgent, step away from the received message first. Then check calmly through a channel you already trusted before the message arrived.

Belgian reading of this situation

• For the bpost parcel message, focus on the relevant Belgian next step: open the official channel yourself, contact the bank, use Safeonweb or preserve evidence.
• The right decision for the bpost parcel message depends on what has already happened. Reading a message is not the same as clicking, paying, sharing a code or granting remote access.

bpost sender, parcel and customs angle

• Use this page for bpost phishing, fake parcel SMS, customs-fee email and sender checks such as [email protected]. A sender name or address can look plausible without proving that the requested action is safe.
• The useful check is whether the parcel, fee or address update appears in bpost.be, My bpost or Track & Trace opened manually. Card details, codes or bank validation from a message link are the risk signal.

Frequently asked questions

Useful official sources

• bpost - Reconnaître le phishing au nom de bpost - link checked on 2026-09-17
• bpost - J'ai reçu un SMS ou un e-mail suspect prétendument de bpost - link checked on 2026-09-17
• bpost - Frais d'importation via My bpost ou Track & Trace - link checked on 2026-09-17
• bpost - Comment payer les frais d'importation - link checked on 2026-09-17
• bpost - Douane et frais pour les colis internationaux - link checked on 2026-09-17
• Safeonweb - Soyez vigilant face aux appels et SMS suspects - link checked on 2026-09-17