At pickup
The sender reads out a 4-digit code. Without it, the traveller cannot mark the parcel collected. The traveller photographs the sealed parcel; the image is timestamped and geotagged. If contents don't match the declaration, the traveller refuses on the spot.