Parcel & Delivery Scam — Fake Pos Malaysia & J&T Notifications
Parcel delivery scams have surged in Malaysia alongside the growth of e-commerce. Scammers impersonate Pos Malaysia, J&T Express, Ninja Van, and other courier companies, sending fake SMS or WhatsApp messages claiming a parcel cannot be delivered. The message includes a link to a phishing website designed to steal banking credentials.
With millions of parcels shipped daily across Malaysia, the timing of these messages often coincides with real orders, making them particularly convincing.
The scam typically begins with an SMS or WhatsApp message claiming your parcel is held due to an incomplete address, unpaid customs fee, or failed delivery attempt. The message includes a link to a website that mimics the courier company's official site.
On the fake website, you are asked to enter personal details and make a small payment (usually RM 1-5) to "release" the parcel. The payment page captures your full banking credentials — card number, CVV, and OTP. Scammers then use these details to drain your account.
Some variants involve phone calls from people claiming to be customs officers who say your parcel contains illegal items and you must pay a fine to avoid arrest.
How common are parcel delivery scams in Malaysia?
Parcel scams are among the fastest-growing scam types in Malaysia, driven by the surge in online shopping. Thousands of fake delivery messages are sent daily.
How do I check if a delivery notification is real?
Always check your order status directly through the courier's official app or website. Never click links in SMS or WhatsApp messages about deliveries.
⚠ Red Flags
- !SMS with shortened or suspicious links — legitimate couriers use their official apps and websites, not bit.ly or random domains
- !Request for payment via link — Pos Malaysia and J&T do not collect delivery fees via SMS links
- !Urgency and threats — "Your parcel will be returned in 24 hours" or "customs seizure"
- !Poor grammar or spelling — many phishing messages contain obvious errors
- !Requests for banking details — no courier needs your online banking password or OTP
🛡 How to Protect Yourself
- 1Do not click any links in unexpected delivery messages
- 2Check your order status directly through the courier's official app or website
- 3Call the courier's official hotline to verify (Pos Malaysia: 1-300-300-300, J&T: 1-300-88-1234)
📞 How to Report
- 1Call 997 (National Scam Response Centre) if you entered banking details on a suspicious site
- 2Lodge a police report at your nearest station
- 3Report the phone number via SemakMule at semakmule.rmp.gov.my
Want to learn more?
Book a scam awareness workshop for your family, community group, or organisation.
View Anti-Scam Programme