ScamMukt LogoScamMukt
india post scamphishingparcel scamsms fraud

The ₹25 Address Fix That Can Empty Your Bank Account: Inside the India Post Address-Update Scam

S
Scam Mukt Admin
Contributor
October 7, 2026
< 8 min read
The ₹25 Address Fix That Can Empty Your Bank Account: Inside the India Post Address-Update Scam

Introduction: A Parcel You Can't Ignore

With the festive season underway, millions of Indians are waiting on parcels: online orders, gifts from family and important documents. Cybercriminals know this, and they are using it to run one of the most widespread scams of the season.

On October 1, 2026, Rajasthan Police issued a cyber fraud advisory warning citizens about a scam in which criminals impersonate India Post, Speed Post and major courier companies. Victims receive a message saying their parcel is on hold because of an incorrect address. All they have to do is click a link and pay a tiny fee of ₹10, ₹25 or ₹50 to fix it.

That small payment is the trap. It isn't the fee the criminals are after. It's the card details, net-banking credentials and UPI PIN you enter to pay it. This article explains how the India Post address-update scam works, why it is so convincing, and how to protect yourself.

1. The Official Warning: What Rajasthan Police Said

The advisory was issued by the Rajasthan Police Cyber Crime Branch on the directions of Director General of Police Rajiv Kumar Sharma, and led by Additional Director General of Police (Cyber Crime) V.K. Singh.

According to the advisory, fraudsters contact victims through SMS, WhatsApp, email and phone calls, posing as postal or courier staff. The messages claim that a parcel containing important documents or valuable items is being held because the delivery address is wrong, and that it will be returned unless the address is updated immediately.

This is not a new trick. PIB Fact Check has repeatedly flagged fake India Post SMS messages asking people to update their address through a link, clarifying that India Post does not send such messages. The scam keeps coming back because it works, especially during busy shopping seasons.

2. How the Scam Works: Step by Step

2.1 The Message

You receive an SMS or WhatsApp message that looks like an official delivery notice. It typically says your parcel has reached the warehouse but cannot be delivered due to an incomplete or incorrect address, and warns that it will be returned if you don't act quickly. In some versions, a follow-up phone call from a "postal officer" adds pressure.

2.2 The Fake Website

The message contains a link to a website designed to look like the India Post portal, with the same logo, colours and layout. You are asked to fill in your name, address and phone number to "reschedule" the delivery.

2.3 The Small Fee

Next, the site asks you to pay a small "address correction" or "redelivery" charge, usually ₹10, ₹25 or ₹50. Because the amount is so small, most people don't think twice.

2.4 The Real Theft

To pay that fee, you are asked to enter your debit or credit card number, CVV and expiry date, your net-banking login, or your UPI PIN. Once you submit these details, the criminals have everything they need to make unauthorised transactions and drain your account. The ₹25 you thought you were paying could become ₹25,000 or more.

2.5 The Malware Variant

In another version of the scam, the message asks you to download an app, usually an APK file, to track or reschedule your parcel. According to the advisory, installing these files can compromise your phone and give fraudsters access to sensitive data and phone functions. Malicious apps like these can read your SMS messages, including bank OTPs, which lets criminals approve transactions without you ever seeing them.

3. Why This Scam Is So Effective

  • Perfect Timing: During the festive season, almost everyone is expecting a delivery, so a parcel message doesn't seem unusual.

  • A Trusted Name: India Post is a government service that people trust, which lowers their guard.

  • A Tiny Amount: A ₹25 charge feels harmless. Scammers deliberately keep the fee small so you focus on the amount, not on what you are typing into the payment form.

  • Urgency: Warnings like "your parcel will be returned in 24 hours" are designed to make you act before you think.

  • Official-Looking Pages: Fake websites copy logos and layouts so closely that they are hard to tell apart on a small phone screen.

4. Red Flags: How to Spot a Fake India Post Message

Red FlagWhat It MeansMessage asks you to update your address through a linkIndia Post does not ask for address updates through SMS linksA small fee is needed to release or redeliver the parcelThis is a classic phishing hook to capture your card or UPI detailsThe link doesn't end in indiapost.gov.inOfficial government sites use .gov.in or .nic.in domainsYou're asked for your UPI PINYou never need your UPI PIN to receive anything, only to send moneyYou're asked to install an app or APK fileOfficial tracking doesn't require installing files from a linkThreats that the parcel will be returned or destroyedPressure tactics are designed to rush your decisionThe message comes from a personal mobile numberGenuine service messages don't come from random 10-digit numbersYou weren't expecting a parcel from India PostTreat unexpected delivery messages with extra suspicion

5. How to Protect Yourself

Based on the Rajasthan Police advisory, follow these steps:

  1. Track Parcels Only Through Official Channels: Type www.indiapost.gov.in into your browser yourself, or use the official India Post app from the Play Store or App Store. Never track a parcel using a link in an unsolicited message.

  2. Check the Website Address Carefully: Before entering any personal or financial information, make sure the domain ends in .gov.in or .nic.in. Look out for lookalike spellings.

  3. Never Share Sensitive Details: Do not share card numbers, CVV, PINs, net-banking passwords or UPI PINs in response to unsolicited calls or messages.

  4. Don't Install Unknown Apps: Never download APK files or apps from links sent by SMS, WhatsApp or email.

  5. Check Your Call-Forwarding Settings: The advisory asks citizens to check and manage call-forwarding settings, so criminals cannot quietly redirect your calls. On most phones, dialling *#21# shows whether call forwarding is active, and ##002# switches off all call forwarding.

  6. Block and Report Suspicious Senders: Block the number and report the message instead of replying to it.

  7. Verify With India Post Directly: If you think a parcel may genuinely be stuck, call the official India Post customer care number 1800-266-6868.

6. What to Do If You Have Already Clicked or Paid

Act quickly. Every minute counts when it comes to stopping fraudulent transactions.

  1. Call Your Bank Immediately: Block your debit or credit card and freeze net-banking or UPI access if you entered those details.

  2. Call the Cybercrime Helpline 1930: Report the fraud so action can be taken to stop the money from moving further.

  3. File a Complaint Online: Register your complaint at https://www.cybercrime.gov.in with screenshots of the message, the link and any transaction IDs.

  4. Uninstall Any App You Installed: If you installed an APK from the message, uninstall it, run a security scan and consider resetting your phone.

  5. Change Your Passwords: Change your net-banking, email and UPI passwords and PINs from a different, secure device.

  6. Check Call Forwarding: Dial *#21# to make sure your calls aren't being diverted, and ##002# to cancel any forwarding.

7. Frequently Asked Questions (FAQ) About the India Post Scam

Does India Post send SMS messages asking me to update my address?

No. PIB Fact Check has clarified that such messages asking people to update their address through a link are fake. Track your parcels only through the official India Post website or app.

Why do scammers ask for such a small amount like ₹25?

The small fee is just a hook. The real goal is to get you to enter your card details, net-banking credentials or UPI PIN, which criminals then use to make much larger unauthorised transactions.

I only entered my address and didn't pay. Am I safe?

Your financial details weren't captured, but your name, address and phone number may now be with fraudsters. Be extra cautious of follow-up calls or messages, especially anyone who already knows your details and claims to be from India Post, your bank or the police.

How can I check the status of a real India Post parcel?

Visit www.indiapost.gov.in by typing it into your browser, use the official India Post app, or call customer care at 1800-266-6868.

Where can I report an India Post scam message?

Call the National Cyber Crime Helpline at 1930 or file a complaint at https://www.cybercrime.gov.in.

Conclusion: Your Parcel Can Wait, Your Bank Details Can't Be Undone

The India Post address-update scam works because it looks routine: a delivery message, a trusted name and a fee too small to worry about. But no genuine postal service will ask you to fix your address by paying through a link, and no delivery ever needs your UPI PIN.

This festive season, pause before you tap. If a message about a parcel pressures you to click, pay or install something, go to the official India Post website yourself instead. And if you think you've been targeted, report it to the cybercrime helpline at 1930 without delay.

Share this article