During gift season, a message asking you to correct a delivery address can feel plausible. Actually expecting a parcel does not authenticate the sender. This guide focuses on a safer checking route and a clear response sequence.
Checked September 15, 2026. A government prevention notice for Seollal in February 2026 warned about texts impersonating parcel services and holiday greetings. We apply those preventive principles to Chuseok deliveries; that earlier notice is not evidence of a new September incident or a surge in losses. Government holiday prevention notice
Four steps for a suspicious message
Establish what happened before deciding the response.
- 01PauseStop further clicks, entry and installation
- 02Check separatelyOpen the official app yourself
- 03Classify eventsOpened, entered, installed or paid
- 04Seek helpOfficial institutions and financial provider
1. Change the verification route
Natural wording and a familiar company name are insufficient proof. Instead of following the message, open your usual shopping or courier app yourself and compare the order and delivery status.
If you do not use an app, independently locate the official website or customer service. Calling the number in a suspicious text may return you to the same sender. An urgent deadline is a reason to preserve the checking step, not skip it.
2. Pause at these requests
These examples were written for explanation. They are not actual received messages or quotations from current cases and contain no working links. Focus on what is requested rather than memorizing individual words.
| Invented example | Request to examine | Independent action |
|---|---|---|
| “Address missing; update today [suspicious link]” | Urgent personal-information entry | Check the address and order in your shopping app |
| “Redelivery fee required [suspicious link]” | Payment details | Ask the official courier whether a fee exists |
| “Holiday photos: install this special app” | External app installation | Confirm with the sender using a known contact |
| “Refund available: send verification code” | Codes or account details | Check separately with the official institution |
3. Distinguish a tap from what you supplied
Opening a link does not by itself establish that all funds were stolen, nor does it prove safety. Identify whether you only viewed a page, entered a password, installed a file or sent money. That makes a request for help more precise.
| What happened | First action | Next check |
|---|---|---|
| Opened only; no entry or installation | Close the page and stop interacting | Downloads, installations and unusual behavior |
| Entered passwords or authentication details | Protect the real account from a safe device | Password, login history and recovery methods |
| Installed a suspicious app or allowed remote control | Stop financial/account activity there; use another device for help | Installed apps, permissions and professional guidance |
| Sent money, paid or exposed financial details | Contact the financial provider officially and call 112 promptly | Preserve transaction/message records and follow assistance |
Do not hand recovery to a “consultant” listed in the suspicious message. Evidence gathering does not require sharing passwords or verification codes. Before rushing to reset the phone, ask official support about records and actions needed for the incident.
4. Save official help routes
KISA's spam response center explains Korean spam reporting and links to 118 assistance. Describe your privacy or device-security concern. For suspected ongoing fraud or financial loss, prioritize 112 and your financial provider's official contact. KISA spam response center
KISA also describes alternatives to telephone consultation. Check its current official options if calling is difficult. These contact routes are for South Korea. KISA 118 assistance
5. Give family one usable rule
Rather than asking relatives to memorize every scam, share: “Open the delivery app yourself to check.” When sending gifts, tell recipients the shop and expected arrival in advance. There is no need to share an entire order screenshot containing personal details in a group chat.
Agree to verify unusual requests through a saved family number. If someone admits tapping, blame can discourage them from reporting next time. Calmly establish what happened and connect them with the appropriate help.
Three lines to keep on your phone
- Verify through an official app you open yourself.
- Check entry, installation and payment before assuming what happened.
- Get help from official institutions and your financial provider.
Passing a message filter is not a safety guarantee. Keep operating systems and apps updated, and separate the verification route when a request feels urgent.