How do you spot a fake courier SMS and what should you do?
Steps to tell scam texts that look like delivery notifications apart without tapping the link, and to report them to the right authorities.
Short answer
Before tapping anything, check the sender and the domain: real couriers don't use bit.ly, .xyz or .top links, and their names aren't padded out like "yurticikargo-tr-takip.com". Copy the tracking number and check it in the courier's own app. If it looks fake, delete the SMS, block the number, report it to BTK on 176, and call 155 if you suspect fraud.
What you need
Step by step
Check the sender name and the domain
Open the message but do not tap the link. Be suspicious if the sender field shows a mobile number starting with +90 5xx, a foreign country code, or a random string of letters instead of a registered brand name like "ARAS KARGO". Look at the last two parts of the domain: "kargotakip-yurtici.xyz" is not real, the genuine address ends as "yurticikargo.com".
Check the tracking number through the company's own channel
Long-press the tracking number in the SMS and copy it, not the link. Open the courier's official app from Play Store or the App Store, or type the web address into your browser by hand, and paste the number into the "Kargo Takip" (tracking) field. If no record comes up, or no shipment is registered to your name, the SMS is fake.
If you tapped the link, cut the connection and change passwords
If a page opened, switch to airplane mode and turn off Wi-Fi. If an .apk file was downloaded, find it under Settings > Apps and tap "Uninstall"; on Android also revoke its rights under Settings > Security > Device admin apps. If you entered card or banking details, call your bank and have the card blocked.
Block the number and mark the message as spam
On Android, long-press the conversation in the Messages app and tap "Block and report spam" at the top. On iPhone, open Messages, tap the conversation, tap the number at the top, then "Info" and "Block this Caller". That stops repeat attempts from the same number.
Report it to BTK, and to 155 if needed
For unsolicited SMS, call 176 or use BTK's Unwanted Message Complaint channel, which you reach through e-Devlet. If you lost money, shared card details, or suspect someone logged into your accounts, call 155 (police emergency) or contact the Cybercrime Unit of the police.
Watch your card and account activity for 48 hours
Check the "Account Activity" and "Card Transactions" sections of your banking app twice a day. Small test charges of 1-10 TL usually come right before a large one. If you see a transaction you don't recognise, call the bank's contact centre and have a chargeback claim opened.
Tips
Watch out
The most common mistake is opening the link "just to look". These pages either collect your password through a fake bank login screen or push an APK that forwards your incoming verification codes to the scammer. A single tap can be enough to drain your full account limit, so never open a suspicious link.
Frequently asked questions
+I tapped the link but entered nothing. Am I at risk?
Simply loading the page rarely empties an account on its own. Still, check whether any file was downloaded, keep your phone updated, and change your passwords if you remain unsure.
+The courier's name is spelled correctly, so is it genuine?
No. Scammers use the brand name in both the text and the domain. The link extension is what gives it away, and you should verify only through the company's official app.
+I lost money. Can I get it back?
Your chances are highest in the first few hours. Call your bank immediately to block the transaction, report it to 155, and file a criminal complaint with the prosecutor's office.
+Why do these texts come to me?
Your number may appear in leaked data lists, or the scammers are bulk-sending to random number ranges. It does not have to mean you were personally targeted.
+Who should I report a fake SMS to?
Report unsolicited messages to BTK via 176, and report attempted or actual fraud to 155 police emergency and the police Cybercrime Unit.
Sources and verification
Last verified: September 15, 2026. tell us. Phone numbers and agencies cited (176 for BTK, 155 for police, e-Devlet) apply to Turkey.
This content is for information only; for official procedures the relevant institution’s current announcements take precedence. Details: disclaimer.