Sender’s address and format: Check the exact email address (is it definitely the courier company’s domain, and not, for example, a strange string of characters) or phone number (in case of SMS messages).

Language errors: Fake messages often contain spelling, punctuation, or syntax errors (although nowadays, generative artificial intelligence can be very helpful for criminals in generating more linguistically correct messages).

Request for sensitive data or „surcharge”: No serious courier company will ask for full payment card details or banking login via SMS or email due to a minor mistake.

Link address: Before clicking, hover your cursor over the link and check the bottom corner of your browser to see where it actually leads. A fake address will usually differ from the company’s official website.

Checking the status: Instead of clicking the link in the message, go directly to the courier company’s official website and check the status there using the tracking number. If there is no number, call the helpline.