Shipment tracking numbers leaked: what it means and what to do

Risk level: medium. Can you change it: no. Found in 1 breaches in this directory.

What this data is

The courier or postal reference used to follow a parcel, often stored with the retailer, delivery address, recipient name and delivery dates.

The risk on its own

A tracking number does not give access to your money or accounts. It can reveal delivery status and sometimes the suburb or delivery location. Most tracking numbers become less useful once the parcel is delivered.

The risk combined with other data

With your name, phone number and address, a real tracking number makes delivery scam messages look genuine. Criminals can time fake redelivery fees or customs charges to parcels you are actually expecting. In some cases they may attempt to redirect or collect a parcel.

How criminals use it

  • A text includes your real tracking number and says you must pay a small redelivery fee through a fake link.
  • A scammer calls about a customs charge for a parcel you are expecting and takes your card details.
  • Someone uses delivery details to intercept a parcel or request a redirect.

What to do now

  1. Check parcels only through the courier's official app or website, typing the address yourself.
  2. Never pay delivery or customs fees through links in unexpected texts or emails.
  3. Use delivery PINs, parcel lockers or signature on delivery for valuable orders.
  4. Report scam delivery texts to your mobile carrier or national scam reporting service.

Frequently asked questions

Can someone steal my parcel with a tracking number?

It is possible with some couriers if other checks are weak, but the more common risk is fake delivery messages.

Why did a scam text have my real tracking number?

It may have come from a retailer, courier or marketplace breach. That does not make the message genuine.

How do I know if a delivery fee is real?

Log in to the courier or retailer account directly. Genuine couriers rarely ask for small redelivery fees by text.

Breaches that exposed this data

Tools that help

Related guides

Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.