Rachel ordered a pair of boots from an overseas shop in mid-September. The site promised delivery in 12 days, and she’d been refreshing the tracking page ever since. So when her phone buzzed with a text — “US Customs: Your package is being held at the facility. Unpaid customs duty of $2.87 must be paid within 24 hours to release shipment” — followed by a link, her thumb was halfway to it before her brain caught up. It looked official. It sounded urgent. It was also a customs fee text scam, and that $2.87 was never the real price of clicking.
She did what millions of people do when they’re waiting on a parcel: she tapped. The page that opened had a federal-looking seal, a tracking number that vaguely matched the one from her order, and a checkout form asking for her card number, expiry, and CVV to pay the “duty.” Within six hours, her card was hit with a $412 purchase at an electronics store she’d never heard of. The fee was bait. The card details were the catch.
That’s the whole business model of this scam. Not the three dollars. The card. Customs agencies don’t text you links to pay duties, no matter how real the message feels — and the timing, right when you’re waiting on something, is precisely why these messages land.
The direct answer: A text claiming your package is stuck in customs until you pay a small fee through a link is a scam. US Customs and Border Protection does not text payment links, and neither do USPS, UPS, or FedEx. Don’t tap the link. Don’t reply. Delete the message, check your package only through the carrier’s official app or website, and report the text to 7726 and ReportFraud.ftc.gov.
How the Customs Fee Text Scam Works, Step by Step
The operation runs like a machine. Blasting out millions of texts costs next to nothing, so criminals only need a tiny fraction of recipients to be expecting a parcel for the numbers to work out. Here’s the sequence.
Step 1: The blast. Software fires the same message at hundreds of thousands of phone numbers at once. The wording rotates — “customs duty unpaid,” “import tax due,” “parcel held at customs facility,” “clearance fee required” — but the shape never changes: your package is stuck, a small payment fixes it, and there’s a deadline. The scammers don’t know what you ordered. They don’t have to. Sooner or later, someone who’s waiting on a delivery gets the text, and it feels personal.
Step 2: The official-looking page. The link opens a site designed to look like a customs agency or a carrier. Some of these fakes are scarily polished — the right colors, a plausible logo, even a tracking number that matches the format of your real one. This is where the scam splits into two harvests. First, it asks you to “verify” your address and details. That’s harvest one: your name, address, phone number, and sometimes date of birth, all of which get sold to other criminals or fed into identity-theft schemes.
Step 3: The fee. Then comes the payment page. It’s always a small amount — $1.99, $2.87, $4.50. Small enough that your brain files it under “not worth worrying about.” That smallness is the entire trick. What you type in — card number, expiry date, CVV — goes straight to the operators. Your card often gets tested with a small charge within hours, then either used for bigger purchases or bundled into batches of stolen card data for resale. Victims who thought they were paying a customs duty end up funding a shopping spree in another country.
Step 4: The recycle. Anyone who paid is now flagged as responsive. Your number gets passed along to other smishing campaigns — fake bank alerts, toll texts, delivery scams — because you’ve demonstrated you’ll engage. This is the same playbook behind the fake USPS delivery texts that flood phones every week, and it rides on the same machinery as the unpaid-toll text scam wave that hit drivers across the country.
Red Flags in a Customs Fee Text
- A link you never asked for. Real customs and postal agencies don’t send you a payment link out of the blue. The U.S. Postal Inspection Service is explicit about this: if you never requested tracking for a specific package, a text with a link about a USPS delivery is a scam — full stop.
- The sender isn’t a short code. Legitimate carrier texts come from verified 5-digit short codes you signed up for. A random 10-digit number, a strange email address as the sender, or an international number is a strong tell.
- Urgency with a countdown. “Pay within 24 hours or your package is returned/destroyed.” Real government agencies don’t threaten destruction of your parcel over a $3 text message.
- A tiny, oddly specific fee. $2.87. $3.40. The precision is theater — it makes the demand feel calculated and legitimate. Real duties are assessed through formal channels, not a text checkout form.
- A link that’s almost right. custom-fee-clearance.com. usps-customs-duties.net. Anything with hyphens, extra words, or a shortened URL in place of a .gov or official carrier domain.
- It asks for your card, not a reference number. A genuine customs hold comes with formal paperwork and reference numbers, not a checkout form that wants your CVV.
- Grammar or phrasing that’s slightly off. Modern scam texts are far better written than the old ones, but many still contain odd phrasing — “your shipment have been held,” “kindly do the needful payment” — that no U.S. agency would ever publish.
Here’s the single biggest tell, and it’s worth memorizing: customs agencies and major carriers never demand payment through a link in a text message. If the money moves through a text link, it’s not customs. That’s the rule that settles every one of these messages.
Real vs. Fake: A Side-by-Side Customs Message Comparison
When the message arrives, your guard is already half down — you’re expecting something, and the text fills in the blank. Use this table to put your guard back up before you touch anything.
| What you see | Real customs/carrier communication | Fake customs fee text |
|---|---|---|
| Channel | Formal mailed notice, carrier’s official app, or a text you specifically signed up for — never containing a payment link | Unsolicited text with a link, often from a random number |
| Payment | Duties paid through the carrier’s official portal, a licensed customs broker, or formal bill — with receipts and reference numbers | Small card payment through a checkout form, sometimes followed by gift-card or wire demands |
| Sender address | .gov domain or official carrier domain, matching the real site exactly | Lookalike domain with hyphens, extra words, odd endings, or a shortened URL |
| Tone | Formal, reference numbers, case identifiers, clear next steps through official channels | Urgent countdown, threats of package return or destruction, pressure to act now |
| How it knows about you | References your actual tracking number from an order you placed | Vague “your package” — the scammers blast millions of numbers and count on someone expecting a parcel |
| CBP’s own rule | CBP states plainly that it will never solicit payment by phone — and legitimate CBP emails come only from @cbp.dhs.gov addresses | |
How to Verify Any Delivery-Fee Message (Do This Every Time)
- Stop. Don’t tap, don’t reply. Not even to type “STOP” — a reply confirms your number is active and invites more scam texts.
- Ask yourself one question: did I sign up for this? If you never requested tracking texts for a specific package, the message fails the only test that matters.
- Open the real app or site yourself. Type usps.com, ups.com, fedex.com, or your retailer’s site directly into your browser — or open the carrier’s official app. Look up your tracking number there. If there’s a real customs hold, it will show up on the legitimate site.
- Check the tracking number, not the story. Copy the tracking number from your original order confirmation email and paste it into the carrier’s official tracker. A scam message can’t fake a real tracking page.
- Call the number you already know. If anything still feels uncertain, call the carrier’s published customer-service number — the one on their website, not the one in the text.
- Remember the .gov rule. Any payment demand arriving by text, from a non-.gov domain, with no formal notice, is fraud. Real CBP notices come with documentation, reference numbers, and official channels — not a checkout form.
- When in doubt, wait an hour. Scams run on panic. A genuine customs issue will still be there in an hour, sitting calmly on the carrier’s real website. A scam’s “24-hour deadline” only exists inside the text message.
What to Do If You Already Tapped or Paid
If you only tapped the link and typed nothing, the risk is low — but close the page, delete the message, and block the sender anyway. Just visiting can occasionally trigger malware, so make sure your phone’s software is up to date.
If you entered card details, act within the hour. Call your bank or card issuer using the number on the back of your card — not any number from the text — and ask them to freeze or replace the card. Review your statements for the next few weeks for small test charges, because scammers often probe with tiny amounts before going big. If you typed a password you reuse elsewhere, change it everywhere and turn on two-factor authentication. The Postal Inspection Service’s guidance is blunt on this: if you interacted with the link at all, even without clicking submit, notify your financial institution.
If you entered identity details like a Social Security number or date of birth, consider placing a fraud alert with the credit bureaus and keep an eye on your credit reports. It’s a hassle, but it’s far cheaper than untangling identity theft months later. Our general guide to smishing walks through the full cleanup checklist for fake-text scams of every kind.
How to Report a Customs Fee Text Scam
Every report helps investigators connect campaigns that hop between numbers, domains, and states. It takes two minutes and it protects the next person.
- Forward the text to 7726 (SPAM). This alerts your mobile carrier’s spam-filtering system and helps shut down the sending number.
- FTC — ReportFraud.ftc.gov. The Federal Trade Commission collects scam reports at ReportFraud.ftc.gov. Text-message scams are among the most reported fraud types — 411,424 FTC reports in 2025 alone, up nearly 67% year over year — so your report feeds a dataset investigators actually use.
- FBI — ic3.gov. File a complaint with the FBI’s Internet Crime Complaint Center at ic3.gov, including the phone number the text came from and the website in the message.
- USPIS — spam@uspis.gov. If the message impersonated USPS, email the text body and a screenshot showing the sender’s number and date to spam@uspis.gov.
- Use your phone’s report-junk option. iPhone and Android both let you report a message as junk right from the conversation — do that, then block the number and delete the text.
And tell the people around you, especially older relatives who order online. These texts are engineered to arrive exactly when someone is waiting on a delivery, and a two-minute conversation about the “never pay through a text link” rule can save them a very bad week.
Sources
- U.S. Postal Inspection Service — scam alert “Smishing: Package Tracking Text Scams,” updated May 19, 2025 — states USPS will not send customers text messages without a customer first requesting the service with a tracking number, and it will NOT contain a link. https://www.uspis.gov/news/scam-article/smishing/
- U.S. Customs and Border Protection — CSMS #60040952, “Cybersecurity Alert – Scammers Impersonate CBP Employees” — warns that scammers posing as CBP employees demand payment or sensitive information; “CBP will never solicit payment by phone.” https://content.govdelivery.com/bulletins/gd/USDHSCBP-39426f8?wgt_ref=USDHSCBP_WIDGET_2
- ArnaqueOuFiable — alert “Fake Customs Fee Scam – Messages Demand Payment to Release a Parcel,” updated October 23, 2026 — documents fraudulent messages demanding customs duties, VAT, or import taxes to release parcels, often with urgent payment requests. https://arnaqueoufiable.com/en/alerts/customs-fee-scam/
- United States Postal Service — “Scams & Scheme Alerts,” Smishing / Texting Schemes section — describes smishing as deceptive text messages impersonating government agencies to lure recipients into providing personal or financial information, with reporting guidance. https://faq.usps.com/articles/Knowledge/Scams-Scheme-Alerts
- TechDigest — “Digital scams drained at least $5.75 billion from Americans in 2025,” published October 1, 2026 (reporting a Surfshark study of three million FTC fraud reports) — text-message scams logged 411,424 FTC reports in 2025, up nearly 67% year over year, making texts the most frequently reported scam contact method. https://www.techdigest.tv/2026/10/digital-scams-drained-at-least-5-75-billion-from-americans-in-2025.html
Last reviewed: October 2026
This article is for education only and is not financial or legal advice.
Pingback: USPS Text Scam: Fake 'Undeliverable Package' Messages Explained - Warn Scams