Fake Aramex Delivery Fee Text

We rate this tip S tier: block the card the moment you notice, not the moment the charges arrive. The fee in the text is bait (AED 4.95, about $1.35, in George Vanous's case), and the page behind it exists to copy the card. Aramex's own fraud page says the company does not ask for personal or payment details by email and calls an unexpected request for money to deliver a package a mark of a scam (read Nov 10, 2026). We think the days between noticing and blocking are the only part of this scam the victim controls, and George's notes show what those days cost him: three charges and a 22-day wait for his money.

We think Aramex's fraud page will still send scam reports through a web form (CareHub) in spring 2027, with no phishing email address or text number of its own: the page read today lists neither, and the address check it teaches is the same one it taught in Jan 2025. Confidence: Likely. Check by: Apr 2027.

What happened to George

His notes do not date the story, and they tell it in four steps.

The text. A message in Aramex's name asked him to pay AED 4.95 to receive a package. In his notes, George writes: "I was expecting a package, so I entered by credit card info without thinking." That is how this scam works on careful people: in a city where parcels arrive every week, the text is right about the one thing you can check from memory.

The address. Only afterwards did he read the address bar. The page was on aramex-a.com: the brand, a hyphen and one letter. He recognized it as a phishing address, and he left the card open.

The charges. "A few days later", his notes say, three charges for hotel bookings appeared on the card from an online travel site. That is when he blocked the card.

The wait. He had to pay the disputed amounts while the bank looked into them. His notes describe waiting 22 days for a fraud specialist to investigate and, if the specialist agreed, credit the amounts back to the account. His own verdict is the tip: "I should have blocked it immediately after noticing the phishing URL."

How to tell the address is fake

Aramex's fraud page warns about addresses that are misspelled or slightly changed and gives aramx.com, aramxpress.org and aramexcourier as examples. Its Jan 14, 2025 article on fake texts adds www.aramexx.com. George's aramex-a.com is the same trick with a hyphen.

The reliable test is the end of the address, read from the right. On a real Aramex page the name directly before .com is aramex and nothing else, as in www.aramex.com or the company's blog at aramexpress.aramex.com. In aramex-a.com the name before .com is aramex-a, which is a different site that anyone could register.

Aramex gives two more checks. Type the tracking number from the message into the Track Shipment box on its own site: if nothing comes up, the message was not from Aramex. And do not follow the link at all; type the official address yourself. The Jan 2025 article also says Aramex will never ask for a card number or password by email or text.

If you already entered the card

1. Block the card now. Use the freeze or block option in your bank's app if it has one, or call the number printed on the back of the card. Do it before anything else on this list: a blocked card refuses the next charge, and a charge that went through has to be disputed.
2. Tell the bank it was phishing and ask for a replacement card with a new number. The Central Bank of the UAE's Consumer Protection Standards (clause 5.1.1.46) require a bank that receives such a report to explain the options of blocking the card during the investigation, closing it, or canceling and replacing it.
3. Dispute every charge you did not make, in writing through the bank's own channel, and keep the reference number. The same Standards give a customer at least 30 business days to report an unauthorized transaction after being told of it, and require the bank to refund one after its investigation or within 30 calendar days of the report, whichever is sooner (clause 5.1.1.47). The refund rule does not apply where the bank has evidence of fraud or gross negligence by the customer. We think that exception is one more reason to stop the charges before they exist, since nobody wants to debate with a bank whether typing a card into a fake page was careless.
4. If the bank does not answer or you disagree, the next door is Sanadak, the UAE's financial ombudsman unit. It takes a complaint once 15 calendar days have passed since you complained to the bank in writing, and its line is 800 SANADAK (800 72 623 25).
5. Report the crime. The UAE government's cyber safety page lists the Ministry of Interior's eCrimes platform, Dubai Police's eCrime service and Abu Dhabi Police's Aman service, or any police station.
6. Tell Aramex. On its Help and Support page, open CareHub and choose "Report Fraud/Scam".

George's 22 days would sit inside the 30 calendar days today's Standards allow (his note has no date, so we cannot say which rule applied to him). The rule limits the wait; it does not remove it.

What the regulators say about the text itself

On Jan 5, 2023, The National reported that the Telecommunications and Digital Government Regulatory Authority (TDRA) had blocked a courier phishing message sent to UAE residents and told the public to check links against the company's real site or app; the same report named Aramex among the brands copied.

The TDRA's FAQ describes texting 7726 to block marketing senders, and it says only sender names that start with "AD" can be blocked that way. That service is built for advertising, not fraud, so we do not count 7726 as a fix. We could not find a TDRA code for reporting a phishing text on Nov 10, 2026; the FAQ sends complaints about unwanted messages to your phone company, which must give you a reference number.

What we checked

Aramex's statements and its examples of fake addresses are from its UAE fraud prevention page and its Jan 2025 article, read Nov 10, 2026. The 30 business days, the 30 calendar days and the blocking options are clauses 5.1.1.46 and 5.1.1.47 of the Central Bank's Consumer Protection Standards as published in its rulebook that day, and the 15 days are from Sanadak's site. The story is George's own, undated, and we have told it without his statements or the bank's name. We did not visit the lookalike address and do not know whether it is still live; the app steps for blocking a card differ by bank and we did not test any.

Sources

• Our Commitment to Protection (fraud prevention), Aramex, read Nov 10, 2026
• Stay ahead of scammers: How to identify fraudulent Aramex texts, emails and websites, Aramex, Jan 14, 2025
• Consumer Protection Standards, Central Bank of the UAE, read Nov 10, 2026
• Sanadak, Sanadak, read Nov 10, 2026
• Cyber safety and digital security, UAE Government, read Nov 10, 2026
• Reporting E-Crime, Dubai Police, read Nov 10, 2026
• UAE authority warns public over phishing links posing as major courier companies, The National, Jan 5, 2023
• FAQs, Telecommunications and Digital Government Regulatory Authority, read Nov 10, 2026
• George Vanous's notes, undated