Package Delivery Text Scams: How to Spot and Stop Them

Do Not Click the Link: What to Do Right Now

If you just received a text message claiming a package from the United States Postal Service (USPS), FedEx, UPS, or DHL cannot be delivered without your immediate action, do not click any links in the message.

If you are expecting a package, do not use the contact details or links provided in the text. Instead, open a web browser or your mobile app store, navigate directly to the official carrier's website or app, and enter your tracking number there. If you did not order anything, delete the message. The sender can wait while you verify their claims independently.

How the Package Delivery Scam Works

According to data from the Federal Trade Commission (FTC), consumers reported losing $470 million to text message scams in 2024, with fake package delivery issues ranking as the most frequently reported text scam FTC 2025. This tactic is known as "smishing" (SMS phishing) USPIS 2025.

Scammers send mass text messages designed to exploit our daily routines and shopping habits Consumer Reports 2025. The scam typically follows a specific sequence:

1. The Urgent Alert: You receive a text claiming there is a problem with a delivery, such as an incorrect address, unpaid postage, or a package "stuck in customs" FTC 2025, FCC 2025.
2. The Look-Alike Website: Clicking the link takes you to a highly convincing, fraudulent replica of a legitimate carrier website FTC 2025. Scammers increasingly use artificial intelligence (AI) to generate realistic branding, personalized details, and fewer spelling errors Consumer Reports 2025.
3. The Data Harvest: The site prompts you to enter personal details, credit card numbers, or account credentials to "redeliver" the item USPIS 2025. In some cases, simply clicking the link can install background malware on your device FCC 2025.

Similar high-urgency tactics are used in other SMS-based frauds, such as toll road text scams and bank-impersonation call and SMS scams.

Key Red Flags to Watch For

While scammers have become highly sophisticated, several structural red flags can help you identify a fraudulent message:

• Unsolicited Links: Legitimate delivery services will never send you an unsolicited text message containing a link USPIS 2025. For example, USPS only sends tracking updates if you explicitly registered for them, and those official updates do not contain links USPIS 2025.
• Demands for Immediate Payment: FedEx and UPS state on their websites that they do not seek payment or personal information via unsolicited texts FCC 2025.
• Tariff and Customs Claims: Fraudsters frequently exploit confusion surrounding de minimis tariff rules on imported goods under $800 FCC 2025. They may claim your package is held up until you pay a sudden customs fee FCC 2025.
• International Callback Numbers: Some notices instruct you to call a 10-digit number that is actually an international line, resulting in high connection fees and costly per-minute rates FCC 2025.
• Brushing and "Quishing" Packages: If you receive a physical package you never ordered, it may be a "brushing" scam used to generate fake online reviews in your name FTC 2025. If the package contains an unexpected QR code, do not scan it; this is a "quishing" attempt to direct your phone to a malicious site FCC 2025.

What to Do If You Already Interacted

If you clicked a link, submitted information, or paid a fee, take these immediate containment steps:

1. Contact Your Bank: If you entered credit card details or bank information, notify your financial institution immediately USPIS 2025.
2. Change Your Passwords: If you entered account credentials, change your passwords on those platforms immediately. If you reuse those passwords elsewhere, update those accounts as well FTC 2025.
3. Monitor Your Credit: Check your credit reports weekly for free at AnnualCreditReport.com to watch for signs of identity theft FTC 2025.
4. Report the Scam:
   • Forward the text message to 7726 (SPAM) to help your wireless carrier block future messages from that sender USPIS 2025, FTC 2025.
   • For USPS-related scams, email a screenshot of the text and the sender's number to [email protected] USPIS 2025.
   • File a report with the FTC at ReportFraud.ftc.gov FTC 2025.

Defense First: Set Up Your Phone Once

Instead of trying to analyze every suspicious message, configure your device to filter out threats automatically:

• Use Official Apps: Download the official USPS, FedEx, or UPS apps from your device's app store. Use these apps exclusively to track your incoming deliveries Consumer Reports 2025.
• Enable Spam Filters: Use your mobile phone's built-in settings to filter and block text messages from unknown senders FTC 2025.
• Block Email-to-Text Gateways: Many spam texts are sent as emails to your phone number. Contact your mobile carrier's customer service (usually by dialing 611) and request to "Block all text messages sent to you as email" and "Block all multimedia messages sent to you as email" USPIS 2025.

Quick Answers

Does USPS ever text you about a package?

USPS only sends text alerts if you explicitly requested them for a specific tracking number. Crucially, legitimate USPS text alerts will never contain a web link USPIS 2025.

What happens if I click the link in a fake delivery text?

Clicking the link typically directs you to a fraudulent look-alike website designed to steal your credit card or personal information. In some cases, it can also trigger background malware downloads on your device FTC 2025, FCC 2025.

How do I report a fake delivery text?

Forward the text message to 7726 to alert your mobile carrier. You can also report the scam to the FTC at ReportFraud.ftc.gov, or email USPS-specific scams to [email protected] USPIS 2025, FTC 2025.