Delivery Text Scams: How to Spot, Stop and Report Fake Package Texts

How Delivery Text Scams Work

A delivery text scam is a type of smishing. Smishing means phishing by SMS, which is the technical name for a normal text message. The goal is the same as an email phishing scam: get you to click a link and hand over money or personal details.

Most delivery scams follow the same simple pattern:

• The hook: You get a text that says there is a problem with a package. It might say the address is wrong, a fee is unpaid, or the delivery failed.
• The pressure: The message gives you a short deadline. It warns that the package will be returned or destroyed if you do not act today.
• The fake website: The link opens a page that copies the look of a real carrier site, such as USPS or DHL.
• The small fee: The page asks for a tiny payment, often a few dollars, to "redeliver" the package.
• The theft: The real target is your card number, your login details, or even your Social Security number.

The FTC describes this exact pattern. It says the texts claim there is a problem with a delivery and link to a site that looks like the real USPS site but is not. Many people reported paying a small "redelivery fee" that was really a trick to get their credit card or Social Security number (FTC).

Why Criminals Use Fake Delivery Texts

Delivery scams work because they fit into normal life. Most people order something online every week. When a text about a package arrives, it feels routine, not suspicious.

Criminals also like text messages for practical reasons:

• Texts get read fast. Most people check a new text within minutes.
• Phone screens are small. It is harder to see a strange web address or a poor copy of a logo.
• The fee is tiny. A $1.99 charge does not feel risky, so people pay without thinking. But the scammer now has the full card number.
• Anyone can be a target. Scammers do not need to know whether you are expecting a package. Many people are.
• Carrier names build trust. USPS, UPS, FedEx, DHL and Amazon are names people already know.

Text is now a major route for fraud. In its 2024 fraud data, the FTC said phone calls and text messages were the most common ways people were contacted by scammers after email (FTC).

Common Delivery Scam Text Examples

Scam texts change their wording often, but the story underneath stays the same. The table below shows typical message types. These are illustrations of common patterns, not copies of a specific text.

Warning Signs of a Fake Delivery Text

Watch for these red flags. Even one of them is a reason to stop and check another way.

• You did not sign up for text alerts, or you are not expecting a package.
• The text asks you to pay a fee, update your address, or "confirm" your details through a link.
• There is no real tracking number, or the number does not work on the official carrier website.
• The link is shortened, such as one starting with bit.ly. DHL warns that SMS scams often use shortened links (DHL).
• The web address looks almost right but not quite. CISA gives the example of "amazan.com" instead of amazon.com (CISA).
• The address ends in an odd domain. FedEx specifically warns about messages that push you to a site on the .shop domain (FedEx).
• The message is urgent. It threatens that your package will be returned or destroyed.
• It came from an unknown phone number or an email address instead of a short code you recognize.
• It asks for things a carrier would not ask for by text, such as your Social Security number, a password, or a gift card payment.

Real-World Examples and Official Warnings

These examples come straight from government agencies and the carriers themselves. They show how common and how organized these scams have become.

• FTC, 2024 data: Messages about package deliveries, usually pretending to be from USPS, were the most reported text scam of 2024. The FTC also says many victims paid a small "redelivery fee" that turned out to be a trick to steal card details (FTC Data Spotlight).
• FBI, toll text scam: In April 2024, the FBI warned about texts claiming the reader owed money for road tolls. The FBI received over 2,000 complaints about this scam starting in early March 2024. It uses the same playbook as delivery scams: a small unpaid amount, a late fee threat, and a link to a fake site (FBI IC3).
• FedEx: FedEx warns customers to watch for emails or SMS messages that urge them to visit a URL on the .shop domain (FedEx).
• DHL: DHL says SMS scams often include a shortened URL, and it asks people to send screenshots of suspicious texts to its anti-abuse team (DHL).
• UPS: UPS says it does not ask for payments, personal information, account numbers, IDs or passwords in an unsolicited way (UPS).

The lesson is clear. The brand name changes, but the trick does not. A small fee, a deadline, and a link are the core of almost every version.

What Happens If You Click the Link

Clicking the link is a mistake, but it is not the end of the world. What happens next depends on what you do on the page that opens.

• If you only opened the page and closed it: The scammer may learn that your number is active. You may get more scam texts. Your risk is lower, but stay alert.
• If you entered your name, address or phone number: Scammers can use these details in future scams that sound more believable.
• If you entered card details: Expect fraudulent charges. Sometimes they are small test charges first, then larger ones.
• If you entered a password: The scammer may try that password on your email, bank and shopping accounts.
• If you entered your Social Security number or date of birth: You are at risk of identity theft, such as new accounts opened in your name.
• If you downloaded an app or file: Your device may now have harmful software on it.

The good news is that fast action limits the damage. The next sections show you exactly what to do.

How to Protect Yourself From Delivery Text Scams

You do not need special skills to stay safe. A few simple habits stop almost every delivery scam.

• Do not click links in unexpected texts. The FTC says to never click on links or respond to unexpected texts (FTC).
• Track packages only on official sites or apps. Use the tracking number from your order confirmation, not the one in a random text.
• Know what carriers will not do. FedEx says it never asks for payment or personal information in exchange for releasing a package. DHL says the only payments it requests by email or SMS are for customs duties and taxes (FedEx, DHL).
• Never pay with gift cards. Amazon says it will never ask you to buy a gift card (Amazon).
• Turn on spam filtering on your phone. The FTC notes your phone may let you filter and block messages from unknown senders (FTC).
• Use multi-factor authentication (MFA) on email, bank and shopping accounts. MFA means you need a second step, like a code or a passkey, to log in. Passkeys and security keys are the strongest choice because they resist phishing. NIST explains how these authenticators work in its digital identity guidelines (NIST SP 800-63B).
• Use a password manager. It fills in passwords only on the real website, so it will not fill them in on a fake one. That is a helpful warning sign.
• Keep your phone updated. Updates fix security holes that harmful links and apps can use.
• Do not reply to the text, not even with "STOP." CISA advises not to click any link, including an "unsubscribe" link, and to just delete the message (CISA).

Quick Checklist: Before You Tap Any Delivery Text

Save this short checklist. Run through it every time a delivery text arrives.

• Am I actually expecting a package from this company?
• Did I sign up for text alerts from this carrier?
• Does the text ask me to pay, update details, or log in?
• Is the link shortened, misspelled, or on an odd domain?
• Can I find the same tracking number on the official app or website?
• If any answer worries you, delete the text and check the official site directly.

Myth vs Reality

Many people fall for delivery scams because of a few common myths. Here is the truth.

What to Do If You Already Clicked

Do not panic, and do not feel embarrassed. These scams are designed by professionals to fool busy people. Follow these steps in order, starting with the ones that match what you shared.

• Step 1, stop: Close the page. Do not enter anything else.
• Step 2, call your bank or card company: If you entered card details, use the phone number on the back of your card. Ask them to block the card and send a new one. Report any charges you do not recognize.
• Step 3, change your passwords: If you entered a password, change it right away. Change it on every other account where you used the same password. Start with your email account.
• Step 4, turn on MFA: Add multi-factor authentication to your email, bank and shopping accounts if it is not already on.
• Step 5, protect your identity: If you shared your Social Security number or date of birth, go to IdentityTheft.gov to report identity theft and get a recovery plan. Consider placing a credit freeze with the credit bureaus.
• Step 6, check your device: If you downloaded an app or file, delete it and run a security scan. If your phone acts strangely, ask your carrier or the phone maker for help.
• Step 7, watch your accounts: Check your bank and card statements often for the next few months. Small unknown charges can be a test before larger fraud.
• Step 8, report the scam: Reporting helps stop the same text from reaching other people. See the next section.

How to Report Scam Texts

Reporting takes two minutes and helps protect others. The FTC recommends three steps for any unwanted text (FTC):

• Forward the text to 7726 (SPAM). This helps your wireless provider spot and block similar messages.
• Report it in your messaging app. In Google Messages, reporting a conversation as spam also blocks the sender and moves the message to your "Spam & blocked" folder (Google). On iPhone, look for the "Report Junk" option under the message.
• Report it to the FTC at ReportFraud.ftc.gov.

You can also report it to the company being copied. Use the official channel for each one:

USPS: Email the text details to spam@uspis.gov, as the U.S. Postal Inspection Service asks. UPS: Use the "Email UPS" fraud reporting option on its fraud page. FedEx: Forward suspicious messages to abuse@fedex.com (FedEx). DHL: Send a screenshot of the text, including the sender's phone number, to phishing@dhl.com (DHL). Amazon: Report it at reportascam@amazon.com (Amazon).

If you lost money, also file a complaint with the FBI at IC3.gov. Include the phone number that sent the text and the website it linked to, as the FBI asks in its smishing alert (FBI IC3).

Useful Free Tools and Resources

These free tools help you check messages and recover if something goes wrong.

• Official carrier apps and websites: The safest place to check any tracking number.
• The Suspicious URL Analyzer: Paste a link to check it for warning signs such as odd domains, IP addresses or hidden redirects. It runs in your browser and never visits the link.
• Built-in spam filters: Google Messages and iPhone Messages can filter unknown senders and report junk.
• A password manager: Creates strong passwords and will not fill them in on fake sites.
• IdentityTheft.gov: The FTC's free site for reporting identity theft and getting a step-by-step recovery plan.
• CISA's phishing guide: Simple advice on how to recognize and report phishing in any form.

Want to build more safe habits? Browse our personal security guides for practical tips on passwords, phishing and staying safe online.

Final Thoughts: Slow Down, Then Verify

Delivery text scams work because they are fast, cheap and easy to believe. But they all depend on one thing: you tapping the link before you check.

Make one habit automatic. When a delivery text arrives, do not tap. Open the official app or website and check your tracking number yourself. If the text is fake, delete it and report it to 7726 and the FTC.

That one pause protects your money, your identity and your accounts. Share this guide with friends and family, especially anyone who shops online often.

Follow IanJob.com for practical cybersecurity tips that help you stay safe online.