Phishing emails pretending to be delivery companies
4 November 2026
A wave of fake messages pretending to come from delivery companies is targeting people and businesses across the UAE. The messages look official and use the names and logos of well-known couriers and postal services.
What the scam looks like
- An SMS, WhatsApp or email saying your parcel is on hold
- A request to pay a small "customs fee" or "redelivery fee", often only a few dirhams
- A link to a website that looks exactly like the real courier's site
- Urgent wording such as "your parcel will be returned today"
Once you enter your card details, criminals use them for much larger purchases. Some links also install malware on phones and computers.
How to spot a fake
- Check the sender: real companies do not use random mobile numbers or free email addresses
- Look closely at the link: misspelt names, extra words or unusual endings like .top or .xyz are red flags
- Real couriers rarely ask for small card payments by SMS
- Poor grammar, strange spacing and urgent threats are common signs
- If you were not expecting a parcel, be extra careful
What to do
- Do not click the link — go to the courier's official app or website yourself and enter the tracking number
- If you already entered card details, call your bank immediately and block the card
- Report the message to the TDRA, the UAE Cyber Security Council or Dubai Police eCrime
- Delete the message and block the sender
Protecting your business
- Train reception, accounts and logistics staff, who receive the most delivery messages
- Use an email security filter with link scanning, such as Microsoft Defender for Office 365
- Turn on multi-factor authentication for all business accounts
- Keep phones and computers updated