{"id":432630,"date":"2026-10-20T07:52:31","date_gmt":"2026-10-20T07:52:31","guid":{"rendered":"https:\/\/malwaretips.com\/blogs\/?p=432630"},"modified":"2026-10-20T07:52:31","modified_gmt":"2026-10-20T07:52:31","slug":"planzer-delivery-email-scam","status":"publish","type":"post","link":"https:\/\/malwaretips.com\/blogs\/planzer-delivery-email-scam\/","title":{"rendered":"Planzer Delivery Email Scam: The CHF 5.21 Fee That Puts Your Card at Risk"},"content":{"rendered":"<p>A parcel is on its way, according to an email bearing Planzer&#8217;s name. There&#8217;s a button to check its progress, just like countless genuine delivery updates.<\/p>\n<p>If you&#8217;re waiting for something, that button is easy to tap. The important part is what happens after the tracking page opens.<\/p>\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1310\" height=\"786\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/10\/planzer-delivery-email-scam-original-email.webp\" class=\"wp-image-432631\" alt=\"Fraudulent Planzer dispatch email with a shipment-status button\" title=\"\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/10\/planzer-delivery-email-scam-original-email.webp 1310w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/10\/planzer-delivery-email-scam-original-email-300x180.webp 300w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/10\/planzer-delivery-email-scam-original-email-1024x614.webp 1024w\" sizes=\"auto, (max-width: 1310px) 100vw, 1310px\" \/><\/figure>\n<h2>Overview<\/h2>\n<h3>A dispatch notice turns into a customs bill<\/h3>\n<p>The Planzer delivery email scam begins with a shipment update. The email claims an order has left the warehouse and offers a way to view its status.<\/p>\n<p>The linked page asks for a name and address as shipment verification. Then it introduces a supposed <strong>CHF 5.21 customs fee<\/strong>.<\/p>\n<p>That small amount is the lure, not a reliable measure of the risk. The payment process asks for full card details and a bank confirmation.<\/p>\n<p>Planzer is the legitimate company being impersonated. The warning applies to this fraudulent email and copied payment journey, not to genuine deliveries.<\/p>\n<h3>The route is documented by police<\/h3>\n<p><a href=\"https:\/\/cybercrimepolice.ch\/de\/faelle\/sendungsverifikation-im-namen-von-planzer-ist-phishing\" target=\"_blank\" rel=\"noopener\">Cybercrimepolice&#8217;s Planzer warning<\/a> describes the copied website, personal-data request, customs pretext, and approval through a banking app or SMS code.<\/p>\n<p>The original email shown above helps identify the opening message. It isn&#8217;t a receipt establishing that customs assessed a charge against your parcel.<\/p>\n<p>You also shouldn&#8217;t read this as a confirmed CHF 5.21 loss limit. Criminals seeking card information aren&#8217;t constrained by the reassuring fee printed on their page.<\/p>\n<h3>What should make you stop<\/h3>\n<p>A tracking check shouldn&#8217;t talk you out of checking who wants your card. Find the real order before deciding what this supposed customs bill means.<\/p>\n<ul>\n<li>A delivery notice unexpectedly asks you to verify personal information.<\/li>\n<li>A tracking check becomes a request for a complete card number.<\/li>\n<li>A small fee is followed by a bank code or approval request.<\/li>\n<li>The payment doesn&#8217;t match a shipment you can independently identify.<\/li>\n<li>The message supplies the only contact route for resolving its own demand.<\/li>\n<\/ul>\n<p>If you&#8217;ve already submitted a card, speak to the issuer now. You don&#8217;t need to wait for a parcel, an error message, or an unfamiliar charge.<\/p>\n<h2>Expecting a Package Doesn&#8217;t Authenticate the Email<\/h2>\n<p>Parcel messages are especially persuasive when the timing seems right. You&#8217;re waiting for an order, and a dispatch notice arrives.<\/p>\n<p>That coincidence can feel like confirmation. But a sender doesn&#8217;t have to know your purchase to reach someone who happens to be expecting a delivery.<\/p>\n<p>The captured message uses the German button <strong>Sendungsstatus anzeigen<\/strong>, meaning view shipment status. It invites a check, rather than announcing the entire payment request upfront.<\/p>\n<p>That matters because opening a tracking page feels routine. Your attention is on when the package will arrive, not on whether a payment journey is beginning.<\/p>\n<p>By the time a fee appears, you may already feel you&#8217;re dealing with the courier. The first click has quietly supplied the trust for the next request.<\/p>\n<p>Instead, open the retailer account where you placed the order. Look for the carrier and tracking details associated with that purchase.<\/p>\n<p>If the retailer&#8217;s records don&#8217;t explain the email, ask the retailer through its established support route. Don&#8217;t use the disputed message as your only reference.<\/p>\n<p>You can be expecting a real parcel and still receive a fake notice. Those two facts are not contradictory.<\/p>\n<h2>How the Planzer Delivery Email Scam Works<\/h2>\n<h3>Step 1: A routine dispatch notice earns the click<\/h3>\n<p>The opening email claims a shipment is already moving. That makes the tracking button seem useful even to someone who isn&#8217;t worried about a problem.<\/p>\n<p>You don&#8217;t have to be threatened or offered a prize. Curiosity about an ordinary purchase can be enough to start the journey.<\/p>\n<p>The safest response is to trace the order from the shop you used, not from a message that suddenly claims to represent its delivery.<\/p>\n<p>Don&#8217;t reply with your order number to help the sender locate it. Give that information only to a retailer or courier you&#8217;ve reached independently.<\/p>\n<h3>Step 2: The copied page asks you to verify the shipment<\/h3>\n<p>The page borrows Planzer&#8217;s logo and appearance, then asks for a name and address. Those fields sound relevant to delivering a parcel.<\/p>\n<p>But their relevance doesn&#8217;t establish the identity of whoever is asking. A fraudulent site can collect information that appears perfectly appropriate for its disguise.<\/p>\n<p>Stop if the process unexpectedly requires personal details. Check whether the genuine tracking information can be viewed through your known order record.<\/p>\n<p>Don&#8217;t assume that reaching the next screen means your answers were checked against a real delivery. A form can simply accept what you type.<\/p>\n<h3>Step 3: CHF 5.21 makes the payment look too small to question<\/h3>\n<p>The supposed customs amount is specific and modest. It may feel easier to pay than to work out whether it&#8217;s legitimate.<\/p>\n<p>That&#8217;s a poor trade when the form asks for an entire payment card. The sensitive information has value beyond this one alleged fee.<\/p>\n<p>Preserve the currency when comparing records. This campaign&#8217;s demand is in Swiss francs, not USD or euros.<\/p>\n<p>A genuine question about import charges belongs with the retailer or carrier responsible for the shipment. It doesn&#8217;t require trusting an unrelated email destination.<\/p>\n<h3>Step 4: Card collection is followed by bank authentication<\/h3>\n<p>The counterfeit payment process requests full card information. It then asks for confirmation through a banking app or an SMS verification code.<\/p>\n<p>Read that bank request on its own terms. What amount and merchant does it name, and are you intentionally making that payment?<\/p>\n<p><a href=\"https:\/\/www.emvco.com\/dynamic\/emv-3-d-secure-whitepaper-v2\/out-of-band-oob-authentication\/business-overview\/\" target=\"_blank\" rel=\"noopener\">EMVCo&#8217;s explanation of separate-channel authentication<\/a> shows why a bank app can be involved in authenticating an online card transaction.<\/p>\n<p>The existence of a genuine banking prompt isn&#8217;t a character reference for the website. Don&#8217;t let the parcel story tell you to ignore the payment details.<\/p>\n<p>If anything differs, reject the request. If you&#8217;ve already approved it, contact the issuer and explain the complete sequence.<\/p>\n<h2>After the Fake Tracking Page, Check the Right Records<\/h2>\n<p>Once you recognize the problem, don&#8217;t look to the same site for cancellation or reassurance. Its confirmation screen isn&#8217;t an independent account record.<\/p>\n<p>Check the bank for payment activity and the retailer for shipment information. Each can answer the part it actually controls.<\/p>\n<p>Keep any existing messages, but don&#8217;t return to the fake process to generate a receipt. The original email is already useful evidence of the approach.<\/p>\n<p>If you&#8217;re contacted later about a refund, start a new verification through your bank. Don&#8217;t continue simply because the caller mentions the parcel or fee.<\/p>\n<h2>What Planzer Itself Says About Suspicious Messages<\/h2>\n<p><a href=\"https:\/\/www.planzer.ch\/en\/phishing-2\/\" target=\"_blank\" rel=\"noopener\">Planzer&#8217;s security guidance<\/a> warns about electronic messages designed to obtain sensitive information and explains how recipients can ask the company to examine suspicious messages.<\/p>\n<p>It advises comparing the sender&#8217;s display name with the actual address and inspecting link destinations without opening them.<\/p>\n<p>Those checks are useful, but none should become an invitation to investigate a live malicious page. When uncertain, use the company&#8217;s independently opened support information.<\/p>\n<p>A generic greeting or unexpected request can raise concern. Good grammar and a plausible signature don&#8217;t settle it in the other direction.<\/p>\n<p>Similarly, receiving the email at an unusual hour isn&#8217;t proof of fraud. Focus on the payment demand, account context, and independently confirmed shipment.<\/p>\n<p>Don&#8217;t blame yourself because the branding looked right. The fraudulent page is designed to borrow recognition from an ordinary delivery workflow.<\/p>\n<p>The point of checking isn&#8217;t to win a visual guessing game. It&#8217;s to avoid giving a stranger control over where and how you pay.<\/p>\n<h2>Sorting Out the Real Order and the Fake Charge<\/h2>\n<p>Start with the purchase you actually made. Find the order confirmation in your retailer account rather than searching through similar-looking delivery emails.<\/p>\n<p>Compare the recipient, order reference, carrier, and current tracking information. A mismatch is something the retailer can help clarify.<\/p>\n<p>If you&#8217;re handling several household orders, ask which person placed the relevant one. Don&#8217;t fill in the missing details yourself because the message feels familiar.<\/p>\n<p>For business deliveries, let the usual purchasing or receiving contact check the request. Someone outside that process may not know which charges are expected.<\/p>\n<p>Don&#8217;t cancel a legitimate order just because this email arrived. The fraudulent message may have no relationship to the real shipment.<\/p>\n<p>Likewise, don&#8217;t file an accusation against the retailer based solely on the sender&#8217;s chosen disguise. Explain that you received a suspicious message claiming a delivery connection.<\/p>\n<p>If a statement entry appears, record its actual descriptor and amount. Don&#8217;t label every unfamiliar entry Planzer without asking the issuer what it relates to.<\/p>\n<p>That distinction helps the bank investigate the financial incident while the retailer continues dealing with the real package.<\/p>\n<h2>When the Amount on the Bank Prompt Doesn&#8217;t Fit the Parcel<\/h2>\n<p>Don&#8217;t mentally replace the bank&#8217;s payment details with CHF 5.21 because that&#8217;s what the delivery page promised. Read the request actually presented to you.<\/p>\n<p>If its merchant or amount is unfamiliar, leave it unapproved. A website explanation about verification or a temporary hold isn&#8217;t independent confirmation.<\/p>\n<p>If the request vanishes before you finish reading, don&#8217;t revisit the fake page to recreate it. Your issuer can advise on recent attempts.<\/p>\n<p>For someone who already approved, write down the approximate time and what you remember. Tell the bank when you&#8217;re uncertain rather than filling gaps with guesses.<\/p>\n<p>Keep the original fee screenshot if you already have one. It can show the difference between what was promised and what your financial records show.<\/p>\n<p>There&#8217;s no need to identify the criminal&#8217;s entire operation before asking for help. The issuer can act on an exposed card and a reported suspicious transaction.<\/p>\n<p>The earlier you describe the actual payment step, the less likely the conversation is to become a routine inquiry about a missing parcel.<\/p>\n<h2>What to Do if You Have Fallen Victim to This Scam<\/h2>\n<ol>\n<li>\n<p><strong>Stop the tracking and payment journey.<\/strong> Close the suspicious tab. Don&#8217;t enter another card or approve another bank request to release the parcel.<\/p>\n<p>If the message is all you encountered, report it as phishing. An email in your inbox doesn&#8217;t by itself mean your device or financial accounts were compromised.<\/p>\n<\/li>\n<li>\n<p><strong>Call your card provider about anything you submitted.<\/strong> Use a number from the physical card or your established bank app.<\/p>\n<p>Say that a fake courier website collected your card details under a customs-payment pretext. Ask whether the card should be blocked and replaced.<\/p>\n<p>Report a second card too if the page asked you to retry. A supposed payment failure doesn&#8217;t establish that earlier information was discarded.<\/p>\n<\/li>\n<li>\n<p><strong>Describe any SMS or app approval.<\/strong> Give the issuer the approximate time, displayed amount, merchant, and confirmation method if you remember them.<\/p>\n<p>Ask it to review pending attempts and completed charges. Check when you must submit a dispute, and keep the bank&#8217;s reference number.<\/p>\n<p>Don&#8217;t promise yourself the loss is only CHF 5.21. Let the issuer determine what actually happened and what protection is available.<\/p>\n<\/li>\n<li>\n<p><strong>Verify the real delivery separately.<\/strong> Open the shop account where you ordered and use its shipment details to identify the correct carrier.<\/p>\n<p>Ask genuine support about any customs question. Don&#8217;t call a number printed in the suspicious email, even if it appears next to a familiar logo.<\/p>\n<\/li>\n<li>\n<p><strong>Record the information you exposed.<\/strong> Keep the message, its sender details, the destination address, and relevant bank notices privately.<\/p>\n<p>Tell the bank whether the site also received your name, address, or phone number. This helps explain later messages that seem unusually personalized.<\/p>\n<p>If you entered a password, change it on the real service and anywhere it was reused. Don&#8217;t reset unrelated accounts without an exposure reason.<\/p>\n<\/li>\n<li>\n<p><strong>Check downloads only if downloads were involved.<\/strong> If the website pushed a tracking application, document viewer, or other installation, assess that additional risk.<\/p>\n<p>Malwarebytes can help inspect unwanted software. AdGuard offers another layer against some malicious sites and ads, without guaranteeing that every phishing page will be blocked.<\/p>\n<p>Neither tool cancels a bank transaction. Card protection takes priority when financial details have already been handed over.<\/p>\n<\/li>\n<li>\n<p><strong>Report the impersonation through trusted routes.<\/strong> Use Planzer&#8217;s own security page to find its reporting instructions and your mail provider&#8217;s phishing-report control.<\/p>\n<p>For a formal complaint about loss, contact your local police. Cybercrimepolice&#8217;s online incident reporting is distinct from filing a criminal complaint.<\/p>\n<p>Avoid publishing your full address or card details when warning others. A redacted screenshot usually conveys the message without creating another privacy problem.<\/p>\n<\/li>\n<\/ol>\n<h2>Frequently Asked Questions<\/h2>\n<h3>Is the Planzer delivery company a scam?<\/h3>\n<p>No. This is a fraudulent email and website impersonating a legitimate carrier. The warning doesn&#8217;t accuse Planzer or your actual retailer of operating the scheme.<\/p>\n<h3>Why is the fake customs charge exactly CHF 5.21?<\/h3>\n<p>That&#8217;s the amount identified in the documented campaign. A precise-looking fee can make a payment request feel routine, but it doesn&#8217;t authenticate the request.<\/p>\n<h3>Can the scam work while I&#8217;m expecting a real package?<\/h3>\n<p>Yes. A real pending delivery doesn&#8217;t establish that an unrelated email belongs to it. Match the notice with information in your retailer account.<\/p>\n<h3>Does paying the fee guarantee the parcel will arrive?<\/h3>\n<p>No. The fake payment page isn&#8217;t a verified delivery service. Ask the genuine retailer or carrier about the shipment instead of paying the impersonator.<\/p>\n<h3>Should I approve the bank notification to cancel the fee?<\/h3>\n<p>Don&#8217;t approve an unfamiliar payment based on a website&#8217;s explanation. Contact the issuer independently and tell it if an approval has already been given.<\/p>\n<h3>What if I only entered my address?<\/h3>\n<p>Stop the form and watch for follow-up messages using that information. Don&#8217;t disclose a card because someone later claims to know the delivery address.<\/p>\n<h2>The Bottom Line<\/h2>\n<p>Don&#8217;t pay the CHF 5.21 demand through this Planzer delivery scam email. Check the real order through your retailer, away from the sender&#8217;s link.<\/p>\n<p>If the counterfeit site collected a card or bank approval, contact the issuer immediately. A small customs pretext can expose much more than a small payment.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A parcel is on its way, according to an email bearing Planzer&#8217;s name. There&#8217;s a button to check its progress, just like countless genuine delivery updates. If you&#8217;re waiting for something, that button is easy &#8230; <\/p>\n<p class=\"read-more-container\"><a title=\"Planzer Delivery Email Scam: The CHF 5.21 Fee That Puts Your Card at Risk\" class=\"read-more button\" href=\"https:\/\/malwaretips.com\/blogs\/planzer-delivery-email-scam\/#more-432630\" aria-label=\"Read more about Planzer Delivery Email Scam: The CHF 5.21 Fee That Puts Your Card at Risk\">Read more<\/a><\/p>\n","protected":false},"author":51,"featured_media":432631,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[49],"tags":[],"class_list":["post-432630","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scam-reports","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50","resize-featured-image"],"_links":{"self":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/432630","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/users\/51"}],"replies":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/comments?post=432630"}],"version-history":[{"count":2,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/432630\/revisions"}],"predecessor-version":[{"id":432639,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/432630\/revisions\/432639"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/media\/432631"}],"wp:attachment":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/media?parent=432630"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/categories?post=432630"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/tags?post=432630"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}