Australia Post scam texts: how to spot a fake

Scammers copy Australia Post because millions of people use it. Here's how to tell a fake Australia Post message from a real one, and what to do if you already clicked.

In short

Australia Post says it will never call, text or email you asking for personal or financial details such as passwords or card numbers, or to request payment. Its tracking texts no longer include links and instead point you to auspost.com.au or the AusPost app.

Most common fake: Undelivered parcel message asking for action or a fee.

Safest check: Check tracking in the official AusPost app with notifications turned on.

Example · fake Australia Post messageIllustrative, links disabled
AusPost: Your parcel could not be delivered due to an invalid address. Update your details and pay 0.95 AUD to rebook: auspost-redeliver[.]top/au
An example fake Australia Post message with the warning signs highlighted.

What Australia Post says

Australia Post says it will never call, text or email you asking for personal or financial details such as passwords or card numbers, or to request payment. Its tracking texts no longer include links and instead point you to auspost.com.au or the AusPost app. Source: Australia Post

Common fake Australia Post messages

  • Undelivered parcel message asking for action or a fee
  • Request to verify or update your delivery address
  • Link to schedule a redelivery
  • Confirm your details message with a fake tracking number
  • Unexpected call asking for payment

Australia Post's real web addresses

Genuine Australia Post links and emails use these domains. Look at the part just before the first single slash: auspost.com.au is real, but auspost-support-center.com or auspost.com.au.account-check.top are not.

  • auspost.com.au

Scammers can also hide a fake link behind real-looking text. Learn how to read a web address.

How to check a Australia Post message safely

  1. Check tracking in the official AusPost app with notifications turned on
  2. Type auspost.com.au yourself instead of using links in messages
  3. Genuine texts use the registered sender names AusPost or StarTrack, so be wary of messages marked Unverified
  4. Do not use contact numbers given in the message, look them up yourself

How to report a fake Australia Post message

Also report it to the official fraud service in your country. See the worldwide list.

If you clicked, paid or shared details

Act quickly. It makes a difference.

  1. If you entered card or bank details, call your bank now using the number on your card, and ask them to block the card.
  2. If you entered a password, change it on the real Australia Post website or app and turn on two-step verification.
  3. Expect follow-up calls or messages pretending to help. Never share one-time codes or move money to a "safe account".
  4. Report the scam, then delete the message.

More help: Fake delivery texts and customs-fee scams and what to do after a scam.

Questions people ask

Does Australia Post send messages asking for payment or personal details?

Australia Post says it will never call, text or email you asking for personal or financial details such as passwords or card numbers, or to request payment. Its tracking texts no longer include links and instead point you to auspost.com.au or the AusPost app.

How can I check if a Australia Post message is real?

Check tracking in the official AusPost app with notifications turned on. Type auspost.com.au yourself instead of using links in messages. Genuine texts use the registered sender names AusPost or StarTrack, so be wary of messages marked Unverified. Do not use contact numbers given in the message, look them up yourself.

How do I report a fake Australia Post message?

Send Australia Post themed scams to scams@auspost.com.au (reports only, no personal reply). Report the scam to Scamwatch, run by the ACCC.

I clicked a link in a fake Australia Post message. What should I do?

Don't enter anything else. If you typed card or bank details, call your bank now using the number on your card. If you entered a password, change it on the real website and turn on two-step verification. Then report the message and delete it.

Official sources and further reading

We check our pages against official advice from the organisations themselves and from government agencies.