How Pachetto's handover codes keep your parcel safe

When you book a parcel on Pachetto, the system generates two independent 4-digit codes: a collection code and a dropoff code. They're the backbone of how we make sure the right parcel ends up with the right person.

The collection code

Shown to you (the sender) in the booking screen. The driver only marks the parcel as picked up after you give them the code in person. If the code doesn't match, the system rejects the collection and the booking stays in accepted state.

This protects against a driver claiming to have collected a parcel they never received.

The dropoff code

Shown to the recipient as soon as the parcel is in transit. The driver only marks the parcel as delivered after the recipient gives them the dropoff code. Again, if it doesn't match, the system rejects the delivery.

This protects against a parcel being handed to the wrong person at the destination.

Why two separate codes?

A single code is risky: if the sender ever shares it with the recipient (which is natural — "I'm sending you something, here's the code"), then anyone who intercepts that message can claim the parcel.

Two codes mean:

• The sender never sees the dropoff code.
• The recipient never sees the collection code.
• A leaked collection code can't be used to take delivery.
• A leaked dropoff code can't be used to fake a collection.

What the driver sees

The driver only sees a input field, not the codes themselves. They type whatever the sender or recipient gives them; the server checks the hash.

We also log every attempt, so if someone tries to brute-force a code, it shows up in the booking history.

What if I lose the code?

You can always re-open the booking page to see your code. The recipient can see theirs in the chat as soon as the parcel is in transit. Codes don't expire until the booking is complete.

That's the whole system: simple, hard to game, and lets the driver focus on driving instead of verifying IDs.