"Your package is being held at customs. Pay 2.500 OMR to complete the release." The message carries the name and logo of a well-known courier, and the link opens a tracking page that looks convincing, right down to a delivery history for a parcel you may actually be expecting. The amount is small on purpose: small enough to pay without thinking, big enough to collect from thousands of victims. Parcel and customs fee scams of this kind are circulating widely in Oman, and the page's real job is to harvest your card details.
How the scam works
The fraudsters buy or guess phone numbers and send the same message in bulk. The fake page may show a generic parcel number or even reuse a real tracking number style. To "release" the parcel it asks for your full card details, including the CVC — which no courier ever needs from a text message. In some versions, the page charges a small fee and then keeps your card on file for larger fraudulent purchases. The key detail is that the message came to you out of nowhere: a real courier contacts you about an actual shipment through its own official systems, not through a random SMS with a link.
Check the courier's official app first
If you are expecting a parcel, do not use the link. Instead, open the courier's official app or website and enter your real tracking number. If the parcel exists and a customs fee is genuinely due, it will be shown there, together with the official payment process and a receipt. Customs duties and courier fees in Oman are collected through official channels — never by a stranger's payment link. If you are unsure whether the message is real, call the courier using the number on its official website and ask about your tracking number. A short call costs less than a stolen card.
If you have already paid
Contact your bank immediately using the number on your card and ask it to block the card and review recent charges — the first fraudulent charge can come hours later. Change your banking app password and keep the fake message, the link and any receipts as evidence for the report.
How to report it
In Oman, report the message through the Royal Oman Police's official cybercrime reporting channels. Current official reporting links are also listed on cyberawareuk.com/report — open them from the site, never from the suspicious message.
Emergency
Oman police emergency: 9999. Call if money has just been taken and you need help while the fraud is still active.