{
  "slug": "fedex-customs-fee",
  "canonical_name": "FedEx / DHL \"customs fee\" and \"shipment on hold\" messages",
  "family": "package-delivery",
  "impersonates": {
    "brand": "FedEx (and other carriers)",
    "disclaimer": "FedEx is not involved; criminals impersonate the brand.",
    "official_fraud_page": "https://www.fedex.com/en-us/trust-center/report-fraud.html"
  },
  "goal": [
    "payment",
    "personal-data",
    "malware"
  ],
  "channels": [
    "email",
    "sms"
  ],
  "summary": "An email or text in a carrier's colours: a shipment is on hold until a customs or handling fee is paid, or a \"delivery notice\" with an attachment. The fee page collects card details; attachments carry malware.",
  "status": "active",
  "first_seen": null,
  "last_seen": null,
  "recognise": [
    "A fee to release a shipment you were not expecting",
    "A link or attachment instead of a tracking number that works on the carrier's site",
    "Sender is not the carrier's domain"
  ],
  "variants": [],
  "specimen": null,
  "tells": [],
  "indicators": {
    "sender_domains": [],
    "senders": [],
    "reply_to": [],
    "phone_numbers": [],
    "urls": [],
    "wallets": [],
    "attachments": [],
    "note": "Indicators change weekly; an empty list never means an email is safe."
  },
  "what_to_do": {
    "if_received": [
      "Do not pay, do not open attachments",
      "Track any real shipment on the carrier's own site",
      "Report it to the carrier and delete it"
    ],
    "if_called_or_paid": [
      "Entered a password? Change it now, and everywhere else you used the same one",
      "Entered card details? Call your bank, ask them to block the card and reissue",
      "Entered a one-time code? Sign in to the real service now and check for changes to email, phone and payment settings"
    ],
    "report_links": [
      {
        "label": "FedEx: report fraud",
        "url": "https://www.fedex.com/en-us/trust-center/report-fraud.html"
      },
      {
        "label": "Report to the FTC",
        "url": "https://reportfraud.ftc.gov/"
      },
      {
        "label": "Action Fraud (UK)",
        "url": "https://www.actionfraud.police.uk/"
      }
    ]
  },
  "malware_family": null,
  "timeline": [
    {
      "date": "2026-09-02",
      "type": "registry",
      "title": "Family created",
      "text": "Opened at launch; no dated specimen on record yet — send yours.",
      "added": [],
      "removed": [],
      "sources": []
    }
  ],
  "related": [
    "usps-redelivery-fee-text",
    "digitspro-delivery-fee"
  ],
  "sources": [
    "https://www.fedex.com/en-us/trust-center/report-fraud.html"
  ],
  "legacy_urls": [],
  "legacy_redirect": false,
  "created": "2026-09-02",
  "updated": "2026-09-02",
  "changelog": [
    {
      "date": "2026-09-02",
      "text": "Record created at the registry launch."
    }
  ],
  "url": "https://soft2secure.com/scams/fedex-customs-fee",
  "licence": "CC BY 4.0",
  "generated": "2026-09-03"
}