Fake Courier Customs Held Scam: Recovery Steps India 2026

If a SMS or WhatsApp message claims your DHL, FedEx, or India Post parcel is held by Customs and demands ₹2,500 to ₹15,000 via UPI for clearance, treat it as a scam. Real Customs never collects duty through UPI links sent on WhatsApp. In April 2026, Sneha Reddy from Hyderabad lost ₹11,800 to a fake India Post Customs SMS that asked her to click a link and pay clearance for a parcel she never ordered. She froze the UPI mandate within 14 minutes, filed NCRP 1930 the same evening, and recovered ₹9,200 in 47 days. The scam works because the message arrives during office hours, mimics official sender IDs, and uses small enough amounts that victims pay before verifying.

1. Take screenshot of the issue, the conversation, and the receipt or transaction page.
2. Note the exact time and the transaction ID, booking ID, or reference number.
3. Do not delete any chat messages, emails, app history, or notification SMS.
4. Raise the complaint on the official app or portal first (in-app help, grievance email).
5. Escalate to NCH 1915, NCRP 1930, or the regulator only after you have saved proof.

🟡 Citizen tip , Most weekend complaints fail not because the law is weak but because evidence gets lost in the first hour. Photograph everything before you call any helpline.

1. Stop, do not click the link. Real couriers and Customs send official tracking numbers, not UPI collect requests. If you have already clicked, do not enter OTP, card, or UPI PIN. Close the browser and switch off mobile data for 60 seconds to break any auto-redirect chain.
2. Verify on the official tracking portal directly. For India Post type the tracking number on indiapost.gov.in. For DHL use dhl.com/in-en/home/tracking.html, for FedEx use fedex.com/en-in/tracking.html, for Blue Dart bluedart.com. If no parcel exists in the official system, the SMS is a scam regardless of how legitimate the sender ID looks.
3. If you already paid, freeze the payment channel within 30 minutes. Open your UPI app, go to autopay or mandates, and revoke any new mandate created in the last 24 hours. Call your bank fraud helpline (HDFC 1800-258-6161, SBI 1800-1234, ICICI 1800-200-3344) and ask them to flag the transaction under Reserve Bank of India circular RBI/2017-18/15 on limited customer liability for unauthorised electronic transactions.
4. File NCRP within 60 minutes for the golden hour benefit. Go to cybercrime.gov.in, choose Report Other Cyber Crime, then Online Financial Fraud. The 1930 helpline can place a temporary lien on the beneficiary account if you call within the golden window of 60 minutes.
5. File the police FIR under BNS 2024 sections 318 (cheating), 319 (cheating by personation), and 336 (forgery), read with sections 66C and 66D of the IT Act 2000. Take the NCRP acknowledgement to the local cyber cell or nearest police station. Refusal to register an FIR is itself an offence under section 200 of BNS 2024.
6. Block the SIM and report the sender. Forward the scam SMS to 1909 (TRAI spam reporting) and report the WhatsApp number inside WhatsApp by long-pressing the chat and choosing Report. File a Sanchar Saathi complaint on sancharsaathi.gov.in under the Chakshu facility for suspicious communications.
7. Notify Customs only if a real parcel is involved. Genuine Customs duty is paid through ICEGATE (icegate.gov.in) by logging in with the IEC code, never through a UPI collect request to a citizen. If the SMS quotes a real airway bill, email the courier compliance team in writing and keep the email as evidence.

• Full screenshot of the scam SMS or WhatsApp message showing sender number and timestamp
• Screenshot of the fake payment page or UPI collect request
• Bank passbook entry or UPI app screen showing the debited amount and beneficiary VPA
• UPI transaction reference number (UTR) and the exact debit timestamp
• Screenshot from the official courier tracking portal proving the parcel does not exist
• Call log if you spoke to the fake Customs officer, with duration and number
• Aadhaar and PAN copy for KYC at the police station and bank
• Cancelled cheque or bank account passbook for refund routing
• Copy of the NCRP acknowledgement number once filed
• Copy of the FIR or zero FIR receipt from the police station

🟡 Most citizens miss this , Save the sender phone number as a contact before reporting; once you forward to 1909 and block, the chat may move to your Spam folder and the original timestamp metadata can be lost.

The fastest channel is the National Cyber Crime Reporting Portal at cybercrime.gov.in or the helpline 1930. Both are operated by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs. Within 60 minutes of the fraudulent debit, 1930 can request the beneficiary bank to freeze the disputed amount under the Citizen Financial Cyber Fraud Reporting and Management System.

For SMS or WhatsApp impersonation, also file Chakshu on sancharsaathi.gov.in (Department of Telecommunications). For UPI specific issues, raise a dispute inside your UPI app under Help, then escalate to the National Payments Corporation of India through npci.org.in if not resolved in 30 days. For courier impersonation (a real DHL or FedEx brand being misused), email the company fraud desk: [email protected], [email protected], [email protected].

🟡 Citizen tip , File NCRP first, then bank, then courier. The NCRP acknowledgement number is the master reference all other agencies will ask for, including the police station.

Tier 1 (Day 0 to 7): NCRP 1930, your bank fraud helpline, courier company grievance email, and local police cyber cell. Most reversal of frozen funds happens at this tier.

Tier 2 (Day 8 to 30): RBI Banking Ombudsman at cms.rbi.org.in if your bank refuses to credit the disputed amount under RBI Master Direction on Customer Service. Senior Superintendent of Police (Cyber) at the district level for FIR follow-up. State Consumer Helpline 1915 for service deficiency by the courier brand.

Tier 3 (Day 31 onwards): District Consumer Disputes Redressal Commission via edaakhil.nic.in for refund and compensation. CBI Cyber Crime wing through cbi.gov.in if loss exceeds ₹10 lakh or involves cross-border transfer. Writ petition to the High Court under Article 226 if state agencies remain inert beyond 90 days.

To,
The Officer-in-Charge,
Cyber Crime Police Station, [District]
Through: National Cyber Crime Reporting Portal (cybercrime.gov.in)

Subject: FIR request for online financial fraud through fake Customs clearance SMS, ₹[Amount] debited on [Date]

Respected Sir or Madam,

I, [Name], aged [Age], resident of [Full Address], holder of Aadhaar [last 4 digits] and PAN [number], wish to report a cyber fraud committed against me on [Date] at approximately [Time].

I received an SMS or WhatsApp message from [Sender ID or Number] claiming that my parcel from [DHL or FedEx or India Post] was held by Customs and a clearance fee of ₹[Amount] was payable via UPI. Believing the message to be genuine, I paid ₹[Amount] through UPI transaction reference [UTR] from my account [last 4 digits] in [Bank Name] to VPA [scammer VPA].

On verifying the official courier tracking portal, no such parcel exists in my name. I realised the fraud at [Time] and immediately filed NCRP complaint number [NCRP No].

I request registration of FIR under sections 318, 319, and 336 of the Bharatiya Nyaya Sanhita 2024, read with sections 66C and 66D of the Information Technology Act 2000, and recovery of the defrauded amount.

Enclosed: SMS screenshot, bank statement, UPI transaction screenshot, NCRP acknowledgement.

Yours faithfully,
[Name]
[Phone] [Email]
[Date]

To,
The Central Public Information Officer,
Indian Cyber Crime Coordination Centre (I4C),
Ministry of Home Affairs,
NDCC II Building, Jai Singh Road,
New Delhi 110001

Subject: Application under section 6(1) of the Right to Information Act 2005

Sir or Madam,

I, [Name], resident of [Address], request the following information regarding my NCRP complaint number [NCRP No] dated [Date] for a fraudulent UPI transaction of ₹[Amount] arising from a fake Customs clearance SMS:

1. Status of the lien or hold placed on the beneficiary VPA [VPA] and beneficiary bank account, with date of communication to the bank.
2. Copy of the action-taken report sent by the assigned police station to NCRP.
3. Number of identical fake Customs clearance SMS complaints received by NCRP in the last 12 months in [State], with average resolution time.
4. Standard Operating Procedure followed by I4C for golden-hour freeze of disputed funds.
5. Details of any inter-bank or inter-state communication issued in my case.

Application fee of ₹10 is enclosed by Indian Postal Order number [IPO No] in favour of the Accounts Officer.

I declare that I am a citizen of India.

Yours faithfully,
[Name]
[Phone] [Email]
[Date]

DCDRC ≤₹50 lakh, State ≤₹2 cr, NCDRC > ₹2 cr, fee ₹100, edaakhil.nic.in. For fraud claims, FIR + NCRP is the primary path; e-Daakhil is the parallel civil track.

🟡 Do this immediately , Disable UPI auto-debit and reduce per-transaction limit to ₹1 the moment a financial dispute opens.

• National Cyber Crime Reporting Portal: https://cybercrime.gov.in (helpline 1930)
• Sanchar Saathi Chakshu module: https://sancharsaathi.gov.in
• India Post official tracking: https://www.indiapost.gov.in
• ICEGATE Customs duty payment: https://www.icegate.gov.in
• RBI Complaint Management System: https://cms.rbi.org.in

• 🛡️ Weekend Problem Solver, 15 emergency topics hub
• 🛡️ Citizen Crisis Response Network, 100 guides
• ☎️ Fake customer-care number scam
• 🛂 Digital arrest / fake notice scam
• 🏦 Banking Ombudsman + RBI route
• 💸 Recover money sent to wrong account
• ⚖️ Consumer court e-Daakhil guide
• 📚 RTI application format
• 🪄 AI RTI Drafter
• 📬 PIO Reply Checker

Login to RTI Wiki to download the printable PDF checklist for this article.

No. Genuine Customs duty on imported parcels is collected by the courier (DHL, FedEx, India Post) at the time of delivery, or paid through the ICEGATE portal using an Importer Exporter Code. Customs never sends a UPI collect request, never asks for clearance fees on WhatsApp, and never threatens parcel destruction within hours. Section 47 of the Customs Act 1962 prescribes a formal bill of entry process, not a SMS link.

Yes, partial or full recovery is possible if you act fast. File NCRP 1930 within 60 minutes for the best chance of beneficiary account freeze. Then approach your bank under RBI Master Direction on Limited Liability of Customers, which caps customer loss at zero if reported within three working days for transactions due to third-party fraud. Recovery typically takes 30 to 90 days.

Scammers use SMS header spoofing services and bulk sender IDs that mimic real brands. Section 66D of the IT Act 2000 punishes cheating by personation using a computer resource with up to three years imprisonment. The Department of Telecommunications has rolled out the Digital Intelligence Platform under Sanchar Saathi to flag such headers, but enforcement lags. Always verify on the brand official website, never trust the sender ID alone.

You can file a complaint against the courier under section 2(11) of the Consumer Protection Act 2019 if you can show their grievance redressal failed, but you cannot hold them liable for impersonation by third parties unless their internal data was leaked. The Supreme Court in Spring Meadows Hospital v Harjol Ahluwalia (1998) 4 SCC 39 set the standard for service deficiency that still guides modern consumer benches.

Approach the Superintendent of Police in writing under section 173(4) of the Bharatiya Nagarik Suraksha Sanhita 2023. If still ignored, file a complaint under section 175 of the BNSS before the Judicial Magistrate, who can direct registration. Refusal by police to register a cognizable offence FIR was held mandatory in Lalita Kumari v State of UP (2014) 2 SCC 1 and remains the controlling precedent.

Possibly. Clicking a phishing link can install a tracker or expose your phone number and IP. Run a security scan, change your UPI PIN and net banking password, enable two-factor authentication on email, and check your CIBIL report for any new credit enquiry. File a Chakshu complaint on sancharsaathi.gov.in. Section 43A of the IT Act 2000 read with the Digital Personal Data Protection Act 2023 covers data protection liability.

The 1930 helpline acts within minutes for the fund freeze request to the beneficiary bank. Investigation by the assigned police station typically begins in 7 to 15 days. Refund of frozen funds requires either a court order or a no-claim certificate from the scammer side, which is rare; most refunds are processed by the bank under the customer liability framework, taking 30 to 90 days.

Yes. Under section 35 of the Consumer Protection Act 2019, one or more consumers having the same interest may file a joint complaint before the District Commission with permission. For criminal action, group complaints under section 154 of the BNSS speed up FIR registration. Coordinate through verified RTI Wiki community channels, not random WhatsApp groups, to avoid further phishing.

The fake Customs clearance scam works because it imitates a familiar transaction at a small enough amount to lower your guard. The legal toolkit (BNS 2024 sections 318 and 336, IT Act 2000 section 66D, Consumer Protection Act 2019, RBI Master Direction on customer liability, Customs Act 1962) is strong, but only if you preserve evidence in the first hour. NCRP 1930 plus a same-day FIR is the difference between a 47-day refund and a closed file. The Citizen Crisis Response Network has 100 guides covering exactly these weekend emergencies, with sample texts ready to copy.