Parcel Lockers, Food Deliveries and Package Theft in Apartment Buildings

Anyone who's stood in an apartment lobby on a Monday morning, surveying the leaning tower of cardboard against the mailboxes, knows the building wasn't designed for any of this. I've been in committee meetings where the entire first agenda item was, in effect, "what do we do about the parcels."

What this guide covers

Australia Post handled approximately 528 million parcels in FY24. Australian apartment buildings now receive an average of five to fifteen parcels per lot per month. Most lobbies were designed for a tenth of that volume.
Parcel theft costs around $140 per stolen item according to insurance industry estimates, and 12 to 18 per cent of urban apartment residents report at least one missing parcel a year.
Parcel lockers can help, but courier compatibility, refrigerated capacity and ongoing software fees make the procurement decision more complicated than the brochure suggests.
Food delivery is a different problem from courier delivery and needs a separate rule.
Access control, CCTV process, mailroom design and short-stay rotation are the four levers a committee actually has.

A lobby that once handled letters now handles online shopping, grocery boxes, meal kits, medication, food delivery riders, courier contractors, returns and the occasional flat-pack furniture order leaning against the mailboxes for three days.

That volume creates a new category of strata dispute. A resident says a package was stolen. A courier says they left it in the lobby. Another resident says delivery riders keep tailgating into the building. The committee says it isn't responsible for private parcels. Everyone is partly right, and nobody is solving the system.

The new lobby reality

Australia Post handled approximately 528 million parcels in FY24, with ecommerce running at about 16 per cent of total retail spend. Industry data puts the average Australian apartment building at five to fifteen parcels per lot per month, with peaks two to three times that during November sales events and December gifting. A 60-lot building can therefore expect 300 to 900 parcels a month, with a Black Friday week pushing through 250 to 400 in seven days.

Three structural changes have happened in the last decade.

The mix has changed. Letters have collapsed; parcels have multiplied. Most older mailrooms were designed around DL letter slots and a small overflow shelf. They're now used as parcel storage by default.

The delivery network has fragmented. A lot may receive parcels from Australia Post, Amazon Logistics, Couriers Please, Aramex (formerly Fastway), Toll, Star Track, DHL, FedEx, Sendle and a dozen smaller carriers, plus food delivery riders from UberEats, EASI, DoorDash and direct-from-restaurant services. Each network has its own scanning, photo-of-delivery and notification logic. Few of them coordinate with each other.

The risk has changed. Parcels now contain meal kits, prescription medication, electronics and wine. The economic value sitting in an unsecured lobby on any given day is materially higher than it was in 2015.

The four-stage delivery chain

Every parcel delivery has four stages, and a building can fail at any of them.

Stage	Building question	Common failure
Access	How does the courier enter?	Tailgating, propped doors, shared access codes
Drop-off	Where is the parcel left?	Mailroom floor, lobby bench, fire exit, wrong unit door
Notification	How does the resident know?	No scan, wrong unit, photo too dark to identify, app silent
Collection	How long can it remain?	Lobby becomes storage; parcels visible from the street

The committee can improve each stage without taking responsibility for every private delivery. The mistake most schemes make is trying to solve stage four (collection time) without fixing stages one to three.

Where parcels actually go missing

CCTV review of disputed deliveries in Australian buildings shows a consistent pattern. Most missing parcels fall into one of four scenarios.

Lobby drop, opportunistic theft. Courier leaves the parcel inside the lobby. Sometime in the next 30 minutes to two hours, an unrelated person follows another resident through the door and removes the parcel. The footage shows the offender wearing a hood, looking at the camera, and leaving on foot.

Misdelivered parcel, never returned. Courier leaves the parcel at the wrong unit door. The actual recipient never sees it. The resident at that unit may not realise it isn't theirs, may set it aside, or may keep it. This isn't theft in the courier's record. The system shows "delivered".

Insider opportunism. A resident, contractor or short-stay guest who lives in or has access to the building takes a parcel that isn't theirs. Footage often identifies the person. The building still can't prove intent.

Delivery never happened. The courier scanned the parcel as delivered to clear their route but actually left it at a different address, returned it to the depot, or didn't deliver it at all. The photo-of-delivery is dark, generic or shows a different building. Missing parcel is a logistics failure rather than a theft.

These four patterns matter because they call for different responses. Cameras and locker systems address scenarios one and partly three. They do nothing for scenarios two and four, which together are often the majority of "stolen" parcel reports.

Parcel locker systems: brands, costs, courier compatibility

Parcel lockers are the most obvious infrastructure response. They can work, especially in medium to large buildings, but the procurement is more complicated than the marketing material suggests.

Brands operating in Australian strata include:

Parcel Sorter by My Smart Locker. Common in residential schemes, modular bays, mobile app credentials.
Stowe Group parcel lockers. Broad commercial and residential footprint, mixed bay sizes and refrigerated options.
Velocity / iLocker / TZ Smart Lockers. TZ Limited (Vic) hardware widely used in mixed-use and commercial residential.
MailRoom by Smiota. Software-led, integrates with intercom and access control platforms.
Australia Post MyPost 24/7 Parcel Lockers. Typically a public-network locker (off-site), not generally an inside-building system, but a competing concept residents may already use.
ParcelPoint style integrations and Pudu Robotics delivery automation appear in some newer high-rise schemes.

The basic supply-and-install economics:

Item	Indicative range	Notes
24-bay mixed-size locker bank, supplied and installed	$8,000 – $18,000	Excludes power, data, room works
Refrigerated locker bank	$15,000 – $35,000	Power upgrade often needed
Software / SaaS subscription	$30 – $120 per month, per bank	Sometimes per-locker or per-resident
Fob / mobile credential integration	$1,000 – $5,000	Depends on existing access system
Mailroom retrofit (shelving, signage, cabinetry)	$3,000 – $15,000	Higher in heritage or constrained rooms
Mailroom security upgrade (door, camera, controlled access)	$25,000+	Typically with broader lobby works

Two questions change the value of the system more than any other: courier compatibility, and capacity at peak.

Courier compatibility. Australia Post, Amazon Logistics, Couriers Please, Aramex, Toll, Star Track, DHL, Sendle and others each have their own delivery workflow. Some lockers operate as "open API" systems that any courier with the recipient's mobile credential can deposit into. Others require a courier integration that not every network supports. A 24-bay locker that only Amazon and Australia Post drivers actually use will solve perhaps 50 to 60 per cent of the building's parcel flow. The remainder still ends up on the lobby bench. Ask any vendor for a written list of the carriers that have completed live integrations at residential sites in the last twelve months. Treat the brochure list with caution.

Capacity at peak. A 60-lot building averaging eight parcels per lot per month is moving roughly 480 parcels a month, about sixteen a day. A 24-bay locker isn't enough on a Monday in late November. Sizing should be based on the seventy-fifth percentile day, not the average, with a written rule for what happens when the bank is full. The kicker is that the most common locker complaint in strata isn't theft. It's "the locker was full so the courier left it on the floor anyway".

Refrigerated lockers and the meal-kit problem

The meal kit category (HelloFresh, Marley Spoon, Dinnerly, EveryPlate and similar) has materially changed apartment delivery patterns. So has online pharmacy and direct-to-consumer wine. These deliveries can't sit in an ambient lobby for an afternoon. They either need to be received personally or delivered into a cold-chain locker.

Refrigerated locker banks cost $15,000 to $35,000 to supply and install, plus power upgrades that may add several thousand dollars in older buildings with constrained electrical capacity. The ongoing energy cost is meaningful. A refrigerated bank running 24 hours a day adds to common property power consumption rather than the recipient's personal account, so the cost recovery model needs to be agreed up front.

Some buildings solve this differently. A clear rule that meal kits and pharmacy deliveries must be timed to a resident-present window, combined with a no-leave-in-lobby instruction at the courier handover, removes the cold-chain problem without the capital expense. The right answer depends on building size, demographic and how often residents are home during weekday delivery windows.

Mailroom retrofits: what they actually cost

Many Australian apartment buildings built between 1990 and 2010 have a mailroom that was sized for letter mail and a small overflow shelf. Retrofitting that room for current parcel volume is the unglamorous intervention with the best return on investment in many schemes.

A basic retrofit (shelving, signage, a controlled-access door, a small camera) runs $3,000 to $15,000 depending on cabinetry quality and condition of the existing room. A full security upgrade with a separately accessed parcel room, a locked door on a fob credential, internal CCTV and a notification panel can run $25,000 or more, particularly when the works touch fire egress, smoke alarms or main lobby finishes.

The committee question isn't "do we want lockers or a retrofit". It's "what is the minimum the building can do this year that materially reduces parcel risk", followed by a longer-term capital plan for the bigger intervention. More often than not, a $4,000 retrofit that adds shelving, a locked door and a camera does more than a $30,000 locker bank with patchy courier integrations.

Food delivery is a separate policy

Food delivery has different risks from courier parcels. It's immediate, often messy, and handled by riders who are under time and earnings pressure. A rider may try to enter secure areas, leave food outside the wrong door, prop open a lobby door, or abandon an order in the lift lobby because nobody answered the buzzer.

The friction is sharper than parcels because the rider is on a clock. A resident enforcing the rules ("please don't prop the door open") is sometimes met with hostility. Fair enough, in a way. The rider's livelihood is being measured in minutes. But committees shouldn't push that conflict onto individual residents.

A useful rule:

Residents meet food delivery riders at the front entrance.
Riders don't enter residential corridors unless the building has deliberately chosen a riders-allowed model.
Doors aren't propped open under any circumstances.
Short-stay hosts give guests the meeting-point rule in writing before arrival.

The rule needs to be visible on the intercom screen or near the entrance. Buried in a by-law nobody reads, it does nothing.

Tailgating and access control

If couriers can enter freely, so can people who aren't couriers. Same goes for food riders. A building's parcel problem and its security problem are usually the same problem.

Industry data on short-stay-heavy buildings suggests 30 to 40 per cent of access events involve non-residents: guests, riders, couriers, contractors, friends-of-residents. Many of those are legitimate. The point is that the access system in those buildings is doing very little filtering by design.

The committee should audit, at minimum:

Intercom call-through rules. Can a courier press a list of buttons until someone answers?
Contractor and trade access codes. Are they personal, time-limited, and revocable?
Old codes. When a contractor finishes a job, who cancels access?
Whether delivery drivers can reach residential floors via lifts or stair doors.
Whether the mailroom and parcel area are on a separate camera and access loop.
Whether the front lobby door actually closes and locks every time, or has a known propped-door problem.

Digital access systems can help, but only with governance. A fob system with twelve-year-old un-revoked codes isn't more secure than a key system. It's a key system with a login screen.

Short-stay rentals and parcel chaos

Short-stay accommodation amplifies every weakness in a building's delivery system. Guests don't know the parcel rules. They prop doors. They give building access codes to riders. They receive parcels in unit numbers they have only stayed at for two nights. They leave parcels behind when they check out.

In practice, short-stay-heavy buildings see a disproportionate share of missing parcel reports, propped-door incidents and lobby-clutter complaints. The fix isn't parcel-specific. It's how the building manages short-stay activity overall. Parcel rules should cross-reference the short-stay framework rather than be designed in isolation.

CCTV review and the privacy line

CCTV is a record after the event. It isn't a delivery system, it isn't a deterrent on its own, and it shouldn't be reviewed casually.

You'd think the camera does most of the work. In practice, the realistic outcome of CCTV review when a parcel goes missing looks like this: the camera shows the courier arrive, leave the parcel, and walk out. Some time later, an unidentified person enters and removes it. Police rarely act on a parcel theft unless the value is over about $1,000 or the same offender is captured on multiple incidents at the same building. Most claims sit with the resident or the sender to resolve through the courier's own claims process.

The privacy practice matters more than the policing outcome.

Footage is reviewed by an authorised person, usually the building manager or an appointed committee member, not by anyone who asks.
Footage isn't posted in resident WhatsApp groups, even with faces blurred.
Stills identifying individuals aren't circulated outside a formal committee process.
The Australian Privacy Principles apply to operators that handle personal information. Treat the camera system as a record-keeping system, not a community surveillance project.
Buildings using locker systems with access logs should treat those logs the same way.

A written CCTV review procedure (who authorises, who reviews, what is shared, what is retained) is a normal part of running a modern apartment building.

Insurance and liability: who owns the parcel

The legal question that comes up after every disputed delivery: when the courier "completes" delivery to the lobby, who owns the parcel?

The general position in Australia is that risk and ownership pass to the consignee (the recipient) at the agreed delivery point. If the courier's terms allow lobby delivery and the parcel is left there, the consignee bears the loss if it's later stolen. Some courier terms require an authority-to-leave or a recipient signature; others allow lobby drop by default.

In practice:

The body corporate is generally not liable for private parcels left in common areas. The lobby isn't a bailment arrangement created by the building.
The sender's liability ends at the courier's delivery confirmation in most consumer contracts.
The resident's contents insurance may or may not cover external theft from a common area. Many policies exclude items not yet inside the unit.
The strata policy doesn't cover private parcel loss. That isn't a strata insurance event.

This isn't legal advice for any particular dispute. It's the reason most missing parcel cases sit unresolved between resident, sender, courier and (sometimes) the resident's contents insurer. The building's role is to reduce the frequency of the problem, not to underwrite it.

State-by-state, briefly

Most Australian strata legislation treats parcel lockers, mailroom upgrades and security infrastructure as common property installations. The general pattern:

NSW. Strata Schemes Management Act 2015. Common property changes via committee or general meeting resolution depending on scale; by-laws can regulate use of common area for deliveries.
Victoria. Owners Corporation Act 2006 and rules. Owners corporations regulate use of common property; major works thresholds apply.
Queensland, WA, SA, Tasmania, ACT, NT. Equivalent provisions in each state's strata or unit titles legislation. Lockers that occupy common property, draw common property power or alter access systems generally need a formal authorisation.

Two general standards are worth knowing about: AS/NZS 4040 series for general security installation practice, and the Privacy Act / Australian Privacy Principles for any locker, intercom or camera system that stores access logs or images.

This is the headline view. Schemes should confirm with their strata manager or a strata lawyer before authorising a significant install.

Building-design considerations for new schemes

Developers and design teams now have enough operational data to design parcel infrastructure into new buildings rather than retrofitting it five years later. Practical inclusions for any new residential scheme:

A dedicated parcel room with controlled access, separate from the letter mailroom.
Locker capacity sized for fifteen parcels per lot per month, with at least seventy-fifth percentile peak headroom.
Refrigerated locker capacity for at least 10 to 20 per cent of lots if the scheme is positioned at the meal-kit demographic.
Power and data provisioning for a software-managed locker system from day one.
A separate food-delivery handover zone visible from the street, near the front entrance, so riders don't need internal access.
CCTV coverage of the parcel area on its own retention loop with documented privacy practice.
Integration between locker credentials and the building's access system, not two parallel apps for residents to manage.

The cost of including these in design is small. The cost of retrofitting them in 2032 is very large.

Common objections and extra checks

"Parcel lockers will solve theft." Lockers reduce some theft. They don't fix tailgating, courier non-compliance, food deliveries, oversized parcels, short-stay churn or resident behaviour. The committee still needs a delivery policy and an access-control review.

"CCTV will prove who took it." Sometimes it will. Often the footage is unclear, overwritten, outside the camera angle or not enough to identify the person. The building should tell residents what CCTV can and can't do before an incident, not during a dispute.

Check who owns the parcel once delivered. The building usually doesn't become the insurer of every package in the lobby. Notices, house rules and resident communications should be clear that residents remain responsible for delivery instructions, vendor claims and secure pickup.

Design for delivery workers, not just residents. If riders and couriers can't find the handover point quickly, they'll prop doors, tailgate, call random units or leave parcels in the first visible corner. Good signage and entry-screen instructions are operational controls, not decoration.

Committee checklist

Map the delivery path from front door to parcel location and identify where parcels actually end up.
Count parcels for two representative weeks, including a sale-event week, before sizing any locker investment.
Get written courier integration lists from any locker vendor under serious consideration.
Decide where parcels may be left and where they may not, and put it on the intercom screen.
Set a separate food delivery rule and include it in resident onboarding and short-stay instructions.
Audit every active access code; cancel old codes; require revocable, time-limited codes for contractors.
Document a CCTV review process: who authorises, who reviews, what is shared.
Decide a written rule for lobby clutter and abandoned parcels and apply it consistently.
Cost a mailroom retrofit alongside any locker proposal; the cheaper option is sometimes the better one.
For new buildings, raise parcel infrastructure with the developer or design team before the lobby is finalised.

How UnitBuddy fits

A modern apartment building runs a small logistics operation whether the committee acknowledges it or not. The building that runs it well is the one that records what's happening, sees the pattern, and intervenes on the smallest workable change before installing a $20,000 locker bank.

Take a typical trigger. The same lot generates five missing-parcel reports in three months, three of them on the same weekday, two flagged by a short-stay guest. Without a register, that's five separate WhatsApp threads and a frustrated owner. With one, it's a visible pattern: a recurring courier, a propped door window, a host who isn't passing on the meeting-point rule. The conversation with the host is grounded in evidence rather than vibes.

For parcel logistics specifically, UnitBuddy holds:

The locker procurement file. The system selected (Parcel Sorter, Smiota, TZ, Velocity, Stowe, Parcel Hive), the courier integrations confirmed, the SaaS subscription cost, the warranty period and the data-portability clause.
The mailroom retrofit record: shelving plan, security upgrade, CCTV coverage, lighting and the related capital works line.
A parcel incident register. Missing parcel reports, courier confirmation timestamps, delivery photos, CCTV review notes, sender refund outcome, held per lot and aggregated to the building.
The access-control overlap with the digital-keys file: courier access codes, food-delivery rider rules, tailgating incidents, propped-door reports.
The CCTV review procedure. Who can request a review, who authorises it, who carries it out, retention period, redaction process, applied consistently rather than a screenshot in a group chat.
The short-stay host instruction template covering parcel handling and delivery rules, attached to any short-term-letting by-law on file.
The food-delivery policy: meeting points, building entry rules, complaint pathway, by-law breach record.

When a parcel goes missing, the resident has somewhere to lodge a structured report rather than DM-ing a committee member at 11pm. When the building is asked, two years from now, whether the locker investment was worth the money, the answer is a documented before-and-after: fewer incidents, fewer complaints, lower cleaner labour for cleared lobby parcels.

UnitBuddy is built to support owners corporations and the strata managers who work with them. The strata manager continues to issue formal notices and run the by-law process. UnitBuddy holds the per-lot operational record (the incident register, the CCTV review log, the host-instruction template, the locker contract) that turns parcel chaos into a small, documented operating problem with a measurable response.

Further reading: Smart Technology in Strata Buildings: What Is Worth Paying For covers the wider question of which building tech investments actually return value. Surveillance Cameras and Smart Doorbells in Strata covers the camera rules in more detail. Digital Keys, Fobs and Intercom Access covers the access-control side of the same problem.