AI Parcel Scam: 7 Red Flags to Spot It (2026)

In 2025, parcel scam SMS messages jumped +85% in France according to the SFPF (French Society for Fraud Protection), and 73% of French internet users have already faced a cyber scam according to the 2025 Crédoc study. But the real shift isn't in the numbers — it's the massive arrival of artificial intelligence in scam techniques. Since March 2026, scammers have been sending AI-generated photos showing a parcel with your name, your first name and sometimes your address printed on the label. Here are the 7 red flags to spot the new scam — and how you can prove a real delivery.

Why AI changes everything in parcel scams

The fake-parcel scam isn't new: for years, scammers have been sending generic SMS impersonating Mondial Relay, Chronopost, Colissimo or DPD to grab €1.99 in fake "customs fees" or harvest banking credentials. What changed in 2026 is the extreme personalization made possible by generative AI.

According to Journal du Geek (May 4, 2026), the new scam waves rely on three AI vectors:

"Hi, this is the courier-carriers, I've finished my morning round, I still have your package(s) for [X] in the truck, it didn't fit in the locker."
— Example of a fraudulent SMS reported in 2026 (source: Journal du Geek)

Generated image: a photo of a parcel with your name printed on the label, studio lighting, neutral background — produced in seconds by an image generation model
Cloned audio: voicemail from a "rushed delivery driver" claiming to be at your door, voice generated by AI. Le Tribunal du Net documented several cases in April 2026.
Personalized text: SMS that calls you by your first name and mentions your city, with none of the typos or weird phrasing typical of older generic scams

Delivery driver holding a parcel with a label showing a name and surname — example of AI-generated photo for a scam — A "too perfect" photo with your name on the label: typical AI generative signal of 2026 scams.

AI removes the main fraud indicator: the generic nature. No need to send 1,000 identical SMS hoping a dozen victims bite. Each message is now custom-made, with a dedicated visual proof. The massive data leaks of recent years (email + name + address combinations sold on the dark web) provide the raw material scammers need.

The Crédoc 2025 study reports that 39% of internet users have been victims of a cyber scam, including 21% via phishing. The average loss is €1,200, and 45% of financial victims are over 60. Carriers themselves are sounding the alarm: in an official statement quoted by Journal du Geek, Mondial Relay states it "never sends personalized photos of parcels with the customer's name and surname".

How the scam works, step by step

You receive an unexpected SMS or MMS — typical example: "Hi, I came by to drop off your parcel but no one was home. Click here to reschedule delivery." The message imitates a known carrier.
A "proof" photo is attached — a delivery driver holds a package, your name and address are clearly readable on the label. This image is what tips trust over.
The link redirects to a fake site — pixel-perfect copy of the carrier's official site. URL is slightly different (mondial-relay-suivi.fr instead of mondialrelay.fr).
You're asked for a micro-payment — €1.99 to €4.99 in "customs fees" or "redirection fees". The amount is intentionally tiny to lower psychological resistance.
Banking data is stolen — your card is then used for fraudulent purchases or sold. Some variants install malware on your phone.

The 7 red flags to spot an AI parcel scam

Even the most sophisticated scams leave traces. Here's the checklist:

1. False urgency

"Your parcel will be returned in 24h", "Last chance". No serious carrier threatens express returns. This is a standard psychological lever in scams.

2. The micro-payment request

€1.99, €2.49, €4.99 in "customs fees", "redirection" or "storage". The official Cybermalveillance.gouv.fr page on parcel phishing reminds that no French carrier charges fees by SMS.

3. The suspicious URL

Always check the exact domain. Common variants: mondialrelay-suivi.com, chronopost-livraison.fr, colissimo-redirection.net. The real domains are mondialrelay.fr, chronopost.fr, laposte.fr.

4. The "too perfect" photo

A parcel photo with your name as crisp as laser print, studio lighting, neutral background, no reflections, no tired delivery driver hand in the background: probably AI. Real driver photos are taken on the move, with visible imperfections.

5. Voicemail under pressure

A call or voicemail from a "delivery driver" claiming to be at your door is a major red flag. Real drivers almost never leave voicemails to demand payment.

6. Personal sender number (06, 07, 09 in France)

Real carriers send from short numbers (5 digits) or from the brand name ("Mondial Relay"). An SMS from a personal French mobile number (06, 07) or non-geographic number (09) is suspect — Mondial Relay states this explicitly on its anti-phishing page.

7. No tracking on the official site

The ultimate test: open mondialrelay.fr or laposte.fr yourself in your browser (typing the URL by hand, never via the SMS link), then paste your tracking number. If the order doesn't appear, it's a scam.

What to do if you received (or clicked) such a message

Anxious person looking at a suspicious SMS on their phone in a dark room — Older people are particularly targeted: 45% of financial victims are over 60 according to Crédoc.

Reacting quickly limits the damage. Official steps:

Don't click the link, don't enter any information, don't download anything.
Report the SMS to 33700 (free anti-scam number run by French operators). Forward the SMS, then send the sender's number.
Report on signal-spam.fr if the scam came by email, or on phishing-initiative.fr to get the fraudulent fake site blocked.
If you paid or entered your card: file a chargeback immediately with your bank. The French Monetary and Financial Code (article L.133-18) gives you 13 months to dispute a fraudulent transaction.
File a complaint at the police station or on cybermalveillance.gouv.fr with screenshots of the SMS and the fraudulent site.
Block the number in your phone settings and delete the message.

The flip side: how do you prove a real delivery?

All media coverage focuses on defense ("how to avoid scams"). But there's another side, rarely discussed: how can you, yourself, prove that a real delivery actually happened — or that your parcel arrived damaged?

When AI generates fake visual evidence, trust in photos erodes. A certified photo from Truth-Check solves this problem by freezing the truth at capture time: cryptographic timestamp, geolocation, device model, SHA-256 hash of the image. The photo becomes admissible against a seller, an insurer, a carrier.

Three concrete use cases:

For consumers: parcel arrives damaged? Take a certified photo of the package and contents on receipt. You have tamper-proof evidence for the damage claim with the seller or carrier.
For e-commerce sellers: send a deposit certificate with each order. End to "the customer says they didn't receive it" disputes with no proof.
For drivers and couriers: a certified photo of delivery = professional, time-stamped and geolocated proof, admissible in case of dispute.

👉 See our dedicated page: Use case: certified delivery proof.

👉 Want to analyze a suspicious photo (e.g., the "label" received by SMS)? Use our free tool: Verify a photo.

FAQ — AI parcel scam

How do I recognize a fraudulent delivery SMS?

Main signals: sender number in 06/07, payment request (even a few euros), URL that doesn't match the carrier's official domain, excessive urgency, message received when you're not expecting any parcel. Always check on the carrier's official site by typing the URL by hand.

Does Mondial Relay really send SMS to charge fees?

No. Mondial Relay states on its official page that no carrier ever requests payment by SMS to release a parcel. Same goes for Chronopost, Colissimo, DPD and UPS.

What should I do if I already paid on a fake site?

File a chargeback with your bank immediately. You have 13 months to dispute a fraudulent transaction under the French Monetary and Financial Code. Then file a complaint at the police station with the evidence (screenshots, SMS, fraudulent URL).

Can I certify a photo of a damaged parcel for my insurance?

Yes. That's exactly Truth-Check's role: capture a photo with sealed timestamp, geolocation and cryptographic hash, to make it admissible against your insurer, the seller or the carrier. See the delivery use case.

Can scammers really clone my delivery driver's voice?

AI voice cloning exists and several cases have been documented in 2026 (Le Tribunal du Net). A few seconds of public audio are enough for a modern model to clone a voice. The rule remains: never pay based on a voice — always verify via the carrier's official channel.

Who is targeted in priority by these scams?

Everyone, but people over 60 represent 45% of financial victims according to Crédoc 2025, with an average loss of €1,200. Scammers also prioritize peak online ordering periods (Black Friday, Christmas, sales).

In summary

The AI-powered parcel scam is a major evolution: personalized photos, cloned voices, custom-tailored SMS
+85% smishing in 2025, €1,200 average loss, 45% of victims over 60
7 red flags to spot it: false urgency, micro-payment, suspicious URL, too-perfect photo, voice under pressure, 06/07 sender, no official tracking
React quickly: 33700, signal-spam.fr, bank chargeback, complaint
Truth-Check is the tool to prove, on your end, that a real delivery happened — or that a parcel arrived damaged

Download Truth-Check to certify your delivery photos:

Want to dive deeper? Read our complete guide to detecting AI-generated photos or our photo authenticity certification guide.