A suspicious parcel text: how to check the delivery

Why the message deserves a check

CERT.LV's August 2026 review describes fake delivery texts using the names of Latvijas Pasts and DPD. Recipients were asked to update an address or postcode. The review was published on 8 September.

Its July review also documented texts and fake websites impersonating delivery companies. A familiar company name is therefore not enough reason to enter your details.

You do not need to memorise every version of a fraudulent message. A more useful habit is to check your own parcel through a service you opened independently.

Start with your order

Find the order confirmation in the shop's account or your email. Check which company is delivering it and use the tracking number from that confirmation. DPD provides parcel tracking on its website; Omniva offers tracking through its self-service site. Open these separately from the link in the text.

If the status does not explain the message, ask the delivery company's support team. Find its contact details on its website. Omniva has a delivery-status enquiry form, and DPD's contact page offers help with parcel enquiries.

Keep the question specific: does this parcel need an address change, and where should you make it? There is no need to argue with an unfamiliar sender or explain why you are doubtful. Resolve the delivery question with the company itself first.

If someone also calls about the parcel

Do not give your personal identity number just because the caller introduces themselves as a courier. In a warning dated 3 December 2024, Omniva described such calls and said its couriers do not ask recipients for this information.

If you have already opened the link

Stop using the page and work out what happened. Did you only open it, enter details, approve a request or install something? This distinction matters when you ask for help. “I opened a link” alone is not enough to determine the condition of a device.

If you entered card or online banking details, contact your own bank immediately through an official channel. Explain what you shared and whether you approved a payment. Swedbank's guidance tells customers to contact the bank immediately if their login details may have been disclosed.

Cancel an unexpected Smart-ID request without entering your PIN. If the requests keep coming, contact Smart-ID support.

Where to report it

You can forward a suspicious text to CERT.LV at +371 23230444. This number is for forwarding messages and phone numbers; it does not handle calls.

If you have been defrauded, keep the correspondence and follow the State Police instructions for making a report. Call 112 when immediate police assistance is needed.

• What to do after sharing details