The parcel-fee scheme
A text about a held parcel asks you to pay a small fee through a link. It is how fraudsters steal your card details.
Reviewed by Vitali Hisko, September 23, 2026
What the message looks like
DPD: Your parcel is held at customs. Pay the 1.50 EUR release fee: hxxps://dpd-track[.]top/pay
What actually happens
The link opens a fake page that looks like the courier's site. It asks for your card number, expiry date and CVV. With those details, money is taken from your card — not 1.50 €, but as much as they can get.
How to recognise it in three seconds
- The address is not dpd.lt or post.lt — it only looks similar.
- It asks for a tiny amount but wants full card details.
- It pushes you to pay "within 24 hours".
What to do
- Do not tap the link.
- Track parcels only on a site whose address you typed yourself.
- Delete the message.
If you already entered your details
- Call your bank right away — ask them to block the card.
- Report it to the police on 112.
Who to tell
Police (112), NKSC (nksc.lt/pranesti — type the address yourself), your bank.