Locker / Pickup Code Phishing
A scammer tries to get the one-time pickup code for your locker or parcel so they can collect it — or phishes your account to reroute it.
Think a message like this reached you? You can check it right now.
What this scam is
You get a message asking you to 'confirm' or share a locker or pickup code, or to log in to 'release' a parcel to a locker. The code is what unlocks your package; if you share it or log into the fake page, the scammer collects the item or takes over your delivery account. Legitimate lockers show the code inside your real account or app — you never need to text it to anyone.
What it usually looks like
- A request to share or 'verify' a locker/pickup code.
- A link to log in to 'release' a package to a locker.
- Urgency that the locker reservation is expiring.
- A sender that is not the retailer or carrier's official channel.
Common warning signs
- Anyone asking you to read out a pickup or locker code.
- A login page that does not match the real retailer or carrier.
- Pressure to act before the 'reservation expires.'
- The message references an order you cannot confirm.
Example wording scammers use
“Amazon: Your locker pickup code could not be verified. Reply with the 6-digit code to keep your reservation.”
“Confirm your parcel for locker pickup — sign in to release it now.”
These are illustrative examples written by ScamSplain, not real messages.
What the scammers want
- Your one-time pickup/locker code.
- Your retailer or carrier login.
- Your physical package.
What to do
- Never share a pickup or locker code with anyone who contacts you.
- Open the retailer's real app to view codes and pickup details.
- Ignore links asking you to 'release' a parcel.
- Report and delete the message.
What to do if you already responded
- Change your retailer/carrier account password immediately.
- Contact the retailer to secure the order and account.
- Report at reportfraud.ftc.gov.