DigitsPro "shipping costs have not been paid" emails
A 2019 email wave: "your package is on the way", a status of "handling – distribution center", and $5.00 in shipping costs to pay before delivery. The payment page collects card details; no package exists.
- Impersonates
- a delivery notification (no real brand)
- Arrives by
- First seen
- 2019-12
- Last seen
- 2019-12
- Specimens
- 1
- Updated
- 2026-09-02
Right now the only version we have seen
How to recognise it
- A small fee to release a package you never ordered
- No carrier name, no tracking number you can look up
- Sender mailboxes on unrelated domains
What to do
- Do not pay; delete it
- Expecting a parcel? Track it on the carrier's own site with your real tracking number
Already called, clicked or paid? what to do in the next hour
- Entered a password? Change it now, and everywhere else you used the same one
- Entered card details? Call your bank, ask them to block the card and reissue
- Entered a one-time code? Sign in to the real service now and check for changes to email, phone and payment settings
How it changed
nothing to compare yet · one wave on record2019-12the $5.00 shipping-fee email
Got a different version? A new subject line, sender, number or domain becomes the next point on this line. Redacted before publication. Send it →
02 Sept2026
Registry
Family created
Grew out of the 2019 guide. The same mechanics now run under carrier brands — see the related records.
26 Dec2019
Specimen
Specimen №1: the $5.00 shipping-fee email
The guide quoted the message and listed the sender addresses and domains of the wave.
From
Qq1LVKa@memberloyaltyprogram[.]com
Channelemail
Your package [order number] is on the way Status: Handling – distribution center [city name] $5.00 shipping costs have not been paid Delivery takes place after payment [Pay shipping costs]

Same trick, other brands
- USPS "package on hold" text (smishing)active · 2026-09
- FedEx / DHL "customs fee" and "shipment on hold" messagesactive · 2026-09
Indicators · 7
- Qq1LVKa@memberloyaltyprogram[.]comsender · 2019-12
- w6065y4@bbscanner[.]comsender · 2019-12
- cocobrouartdu06@outlook[.]frsender · 2019-12
- memberloyaltyprogram[.]comdomain · 2019-12
- bbscanner[.]comdomain · 2019-12
- ecogadgetslive[.]comdomain · 2019-12
- turboanalysis[.]netdomain · 2019-12
Indicators change weekly; an empty list never means an email is safe. Defanged: replace [.] with a dot.
In other streams
Registry data
- Machine-readable
/scams/digitspro-delivery-fee.json- Timeline feed
/scams/digitspro-delivery-fee/feed.xml- Sources
- 1 · 1 change logged
- Licence
- CC BY 4.0 · attribution required
- Created / updated
- 2026-09-02 / 2026-09-02