Česká pošta Fake SMS: How to Spot Czech Post Delivery Phishing Scams

If you live in the Czech Republic, you have almost certainly received a fake Česká pošta SMS. These messages claim you have a package waiting, a delivery fee to pay, or an address to confirm — and they include a link that steals your personal or financial information. It is the single most common phishing scam in the country, and it works because online shopping has made package delivery notifications a routine part of daily life.

NÚKIB and Policie ČR issue warnings about these scams regularly, but the messages keep evolving. Here is how to recognize them every time.

How the Scam Works

The attack follows a predictable pattern:

1. You receive an SMS that appears to come from Česká pošta, Zásilkovna, PPL, or DPD.
2. The message says your package cannot be delivered due to an unpaid fee, incorrect address, or customs charge.
3. It includes a link to a page that looks exactly like the Česká pošta website.
4. The page asks you to pay a small fee (usually 25-49 CZK) by entering your payment card details.
5. The scammers now have your card number, expiration, and CVV — and they drain your account.

Some more sophisticated versions install malware on Android phones or redirect you to a fake internet banking login page.

Examples of Fake Česká pošta Messages

Here are common message templates used by scammers:

• "Česká pošta: Váš balík čeká na doručení. Zaplaťte poplatek 29 CZK: [link]"
• "Vaše zásilka nemohla být doručena. Aktualizujte adresu: [link]"
• "Celní poplatek 39 CZK nebyl uhrazen. Zaplaťte zde: [link]"
• "Česká pošta: Poslední pokus o doručení. Potvrďte zde: [link]"

The messages often use Czech diacritics correctly, making them harder to distinguish from legitimate notifications.

How to Tell Real from Fake

Why This Scam Is So Effective in the Czech Republic

Several factors make Czech residents especially vulnerable:

• High e-commerce adoption. Czechs shop online frequently through Alza, Mall.cz, Notino, and international sites. Expecting a package is the default state.
• Multiple carriers. Between Česká pošta, Zásilkovna, PPL, DPD, and GLS, people regularly receive delivery notifications from different services, making it harder to keep track.
• Small fee psychology. Asking for 29 or 39 CZK feels insignificant, so people pay without thinking critically about the request.
• Good Czech language quality. Unlike many international phishing campaigns, these messages use natural Czech, including proper diacritics.

What to Do If You Receive a Suspicious SMS

1. Do not click the link. If you are expecting a package, open the carrier's official app or website directly and enter your tracking number there.
2. Check the sender. Česká pošta sends from recognized numbers. Random mobile numbers are always fake.
3. Verify the URL. Legitimate Česká pošta URLs are on ceskaposta.cz or postaonline.cz. Anything else is fraudulent.
4. Report the SMS. Forward suspicious messages to NÚKIB or report them at nukib.cz.
5. Delete the message after reporting.

What to Do If You Already Clicked

1. If you entered card details: Contact your bank immediately and block your card. Call the number on the back of your card.
2. If you entered banking credentials: Change your internet banking password immediately and call your bank's fraud department.
3. If you installed an app (Android): Put your phone in airplane mode, then factory reset it. Change all passwords from a different device.
4. File a police report at your local Policie ČR station.
5. Monitor your bank accounts for unauthorized transactions over the next several weeks.

Share Tracking Numbers and Delivery Info Safely

When you need to share a tracking number, delivery address, or pickup code with someone, avoid leaving it in a permanent chat message. Use LOCK.PUB to create a password-protected link that auto-expires. The recipient views the information once, and it disappears — no permanent trail in your Messenger, WhatsApp, or email history.

The Bottom Line

Fake Česká pošta SMS messages are a daily reality for Czech internet users. The scam succeeds because it exploits the mundane routine of receiving packages. The defense is straightforward: never click links in delivery SMS messages. Always go directly to the carrier's official website or app to check on your packages.

When sharing delivery details or any sensitive information, protect it with LOCK.PUB — encrypted, expiring, and free.