Real Delivery Notice vs Toll-Text Scam
How to distinguish a genuine courier update or toll notice from a smishing text designed to steal your card details.
Last reviewed: 1 June 2026
Couriers and toll operators really do send messages, and most of what lands in your inbox is routine. A genuine notice references an order or an account you already have, and when there is money owed it appears when you log in to that account, not only in the text. Scam versions work by timing and probability. They go out in enormous numbers, so a share of recipients happen to be expecting a parcel or to have driven a toll road that week, and the small fee is set low enough to feel easier to pay than to argue with. The deadline and the threatened penalty do the rest. The distinction that settles it is whether the charge exists anywhere other than the message, checked through the official site or app you open yourself.
Side-by-side comparison
| Real delivery or toll notice | Smishing text scam | |
|---|---|---|
| Fee demand | Legitimate tolls are billed to a registered account or plate; delivery fees are agreed at purchase | Sudden 'outstanding' fee required immediately via a link |
| Link destination | Official domain matching the courier or toll authority | Lookalike domain or URL shortener hiding the destination |
| Account verification | Issue visible when you log in to your account directly | Debt only exists in the message; not in any official account |
| Card details | Card details entered only in your established account portal | Linked page asks for full card number, expiry, and CVV |
| Deadline pressure | Reasonable notice periods for genuine disputes | 'Pay within 24 hours or face a penalty' |
| Personalisation | Usually references your actual order or account number | Generic or uses details that could apply to anyone |
Common red flags
- Unexpected fee demand via text with a payment link
- Link to a domain that doesn't match the official authority
- Urgent deadline framing a small fee as growing to a large penalty
- Page asks for full card details rather than logging in to an account
- No matching record when you check directly in the official app or account
- Message received when you haven't recently used a toll road or ordered a delivery
Verification steps
- Go directly to the courier's or toll authority's official website — type the URL, don't click the link
- Log in to your account to verify whether any genuine balance or delivery issue exists
- Call the number on the official website if you still have questions
- Forward suspicious texts to your national SMS fraud reporting service
What not to do
- Don't click the link in the text message
- Don't enter card details on a page reached via a text link
- Don't pay the fee before verifying in your official account
- Don't call numbers provided in the text — find the official number independently
A safe response
Do not tap the link. Open the courier's or toll operator's official app, or type their address into your browser yourself, and log in to see whether anything is actually owed. If there is a real balance, pay it there through your normal account. If there is nothing, the message was fake and you can delete it after forwarding it to your national SMS fraud reporting service. If you already entered card details, ring your bank on the number on the back of your card, ask them to stop the card and watch for pending payments, and check whether any subscription or repeating payment was set up.
Frequently asked questions
How do smishing texts know I might be expecting a delivery?
They often don't — they send the message to millions of numbers and rely on statistical probability that some recipients will be expecting something. A genuine delivery text will reference your actual order number.
Can a toll authority actually send me a text?
Some toll authorities do communicate by text, but they direct you to log in to your existing account rather than asking for payment card details via a new link. Verify any claim through your registered account.
I clicked the link but didn't enter any details — am I at risk?
Clicking alone is usually low risk if your device is updated, but if the page asked you to install anything, grant permissions, or download a file, seek further advice from a security professional.