How to Recognise Fake Payment Confirmations and Courier Scams

A buyer says the money has been sent. An email with a familiar-looking logo arrives. A courier is apparently waiting, but the seller must pay a refundable insurance charge first. These details can feel like separate proof points, yet all may be controlled by the same scammer. The decisive question is simpler: can you verify the transaction through an account or organisation reached independently?

This guide is for private buying and selling in Ireland. It explains common fake-confirmation and courier stories, not how every bank transfer or delivery service operates. Providers have different processing rules and legitimate services can change. Use the official app, website or phone number for the exact provider and keep the item when payment status is uncertain.

A payment message is not the payment

Screenshots, emails, texts, chat animations and a buyer’s banking screen only show information presented to you. They do not prove that cleared funds are available in your account. Images can be edited, emails spoofed and webpages copied. A genuine-looking sender name, transaction reference or green tick does not change that limitation.

An Garda Síochána has warned sellers that fraudsters may send fake emails or texts purporting to be from a bank or payment service to make the seller dispatch an item before money reaches the account. Garda advice is to check with the bank or payment service and not complete the sale when in doubt. Build the handover around that independent check.

The seller’s independent verification rule

Do not use contact information inside the supposed confirmation. A fake page can provide a fake help number, and a caller can continue the same story. Find the organisation separately. If you cannot access your own account safely at a meetup, pause or reschedule; do not treat the buyer’s impatience as evidence.

What a fake confirmation may look like

Any one detail may have an innocent explanation, including a genuine processing delay. The safe response is still the same: do not release the item on the strength of the message. Verify within the real service, establish the status with the provider and wait. A legitimate buyer can decide not to wait, but cannot make an unverified payment become cleared by arguing.

Pending, scheduled and cleared are not interchangeable

Payment interfaces use different language. A transfer may be scheduled but not sent, pending review, temporarily displayed or subject to a later dispute. Do not guess what a label means. Ask your provider what the exact status permits and whether you can rely on the funds before handing over valuable goods. Never let a stranger explain your own bank’s rules to you.

The account-upgrade story

A common script claims the buyer used a business account or sent too much, so the seller must pay to expand an account before receiving funds. The scammer may promise that both amounts will be released together. Receiving ordinary marketplace payment should not require sending money back to the buyer, buying gift cards, paying a stranger’s agent or disclosing an authentication code.

Do not follow instructions in the message. Ask the real provider through independently found support whether the account has any restriction. If a genuine account issue exists, resolve it inside that provider without a transfer to the buyer. A fee demanded through an unfamiliar link is not made safe by calling it refundable.

Overpayment and refund manipulation

The buyer may claim to have accidentally transferred more than the price, then ask the seller to return the difference or pay the courier. The original confirmation may be fake, or an apparent credit may require investigation. If unexpected funds genuinely appear, do not redirect them at the sender’s instruction. Contact your bank or payment provider and let it handle the correction through its proper process.

A separate refund can leave the seller out of pocket if the original transaction is reversed, unauthorised or nonexistent. Keep messages and references, avoid spending the money and do not release the item until the provider confirms the position. The agreed sale price never requires a seller to become a payment intermediary.

How the invented courier story works

A supposed buyer often agrees without inspecting the item and says a courier, relative or removal company will collect it. The next message introduces insurance, a booking deposit, a refundable collection charge, customs, secure-delivery registration or a special envelope containing cash. The seller is told to pay first or enter card details on a supplied page.

A genuine third-party collector is possible, especially for furniture, but it should not rewrite the deal. Confirm the named collector, vehicle, timing, payment and authority in platform messages. Arrange transport through a service you independently know when that is your responsibility. Do not hand goods to an unexpected driver while payment remains unverified.

Courier logos and tracking pages can be copied

A message can reproduce a courier’s colours, spelling, footer and tracking layout. The browser padlock only indicates an encrypted connection to that particular site; it does not prove the operator is genuine. Search advertisements and sponsored results can also lead to lookalike pages. Start from the carrier’s known official address or app and enter a tracking number there.

An Post’s security guidance says that for items coming into Ireland it will not ask for customs charges through a link in an SMS or email. Policies for other services and special routes vary, which is why a marketplace message should never be your source of truth. Check the exact shipment independently with the actual operator.

Delivery phishing texts exploit timing

Many people are expecting a parcel, so a generic message about an incomplete address, missed delivery or small charge can arrive at a believable moment by chance. The amount may be tiny because the real target is card data, login credentials or an authentication approval. Knowing that a parcel is due does not authenticate the text.

Garda courier-scam guidance advises people awaiting a package to verify its status independently, avoid links in unsolicited messages and never provide payment details, PINs, card numbers or passwords. The National Cyber Security Centre likewise advises contacting an organisation through the official number on its own website rather than details in a suspicious message.

Never share a code to receive money

A one-time passcode or app approval normally authorises access or a transaction; it is not a receipt. Do not read a code to a buyer, paste it into their page or approve a notification you did not initiate. Banks and legitimate support staff do not need your PIN or full online-banking password to let another person pay you.

Also refuse remote-access software and screen sharing. A scammer who sees your screen may capture balances, identifiers and codes or guide you into authorising a transfer. If support is genuinely needed, end the conversation and contact the provider from a different trusted route.

QR codes and shortened links do not deserve extra trust

A QR code can hide the same malicious address as a button. A shortened link makes the destination harder to inspect. Neither is needed to prove that someone has paid you. Do not scan a code attached to a buyer’s message, parcel or supposed courier form. Navigate independently and complete only the steps shown in the genuine account.

Email details worth checking—but not trusting alone

A polished message can still be fake, and an awkward message can be legitimate. Treat these as reasons to stop, not as a scoring system that can prove safety. The authoritative check remains the transaction shown in your independently opened account and, when necessary, confirmation from real provider support.

Buyer checks before paying for delivery

Seller checks before dispatch or collection

A safe response to a suspicious message

If you entered card or banking details

Contact your bank or card issuer immediately using the official number or app. Explain what was entered, approved, installed or transferred and follow its fraud instructions. Ask whether cards, credentials or accounts should be frozen and whether a recall, dispute or chargeback route may apply. Outcomes depend on the method and facts, so act quickly without assuming recovery is guaranteed.

Change affected and reused passwords from a clean device, enable multi-factor authentication and review sessions and recovery details. If you installed software or allowed remote access, disconnect the device and seek appropriate technical support. Continue monitoring the relevant accounts because a small initial charge may be followed by later attempts.

If you released the item on a fake confirmation

Save the buyer profile, advert, conversation, confirmation, collection time, lawful vehicle observations, courier details, item identifiers and any available camera information. Contact the marketplace and actual payment provider, and report the suspected fraud promptly to your local Garda station. Do not arrange a private confrontation or send more money to recover the item.

Separate a real delivery problem from a scam

A real parcel can be delayed, misaddressed or subject to a legitimate charge. Resolve it from the original order record and official carrier channel. Match the tracking number, sender, route and requested action. If the carrier cannot find the shipment or the payment request exists only through the buyer’s link, keep the transaction paused.

The two-device or two-channel check

For a higher-value sale, use separation: receive the message on one channel, then verify through an independently opened app or known device. This does not require owning two phones; it means the suspicious communication cannot choose the route used for confirmation. A saved official app, typed bookmark or number from the provider’s real website is materially stronger than tapping the incoming link.

One-minute decision checklist

The strongest defence is procedural, not visual. Never decide from a logo, screenshot or persuasive story. Keep control of the item, use a route the other person did not supply, verify money with the institution that holds it and verify delivery with the company carrying it. A genuine transaction can survive a careful pause; a scam usually depends on preventing one.