Package Delivery Text Scam: How to Spot It and Verify Safely
Key Takeaways
- Everyone is waiting for a package: That is why delivery scams work - the premise is always plausible.
- Real carriers do not ask for fees via text: Redelivery fees collected through text links are scams.
- The link is the trap: Clicking leads to fake sites that collect card details or credentials.
- Verify through official apps: Real delivery issues appear in USPS, FedEx, UPS apps and retailer accounts.
- Shortened URLs are a red flag: Legitimate carriers use their own domains in tracking links.
- USPS says its tracking texts and emails are sent only after you request tracking, and they don't contain links.
- FedEx says it never requests payment or personal information in exchange for releasing a package. UPS says it doesn't ask for payments or personal information in an unsolicited way. Both carriers point people to their own websites to check a shipment.
If you are not expecting a package, treat delivery links as suspicious. If you are expecting one, check tracking in the retailer or carrier app you open yourself, not through the text.
Why package delivery scams are so effective
At any given time, millions of people are waiting for packages. A vague "delivery problem" message is almost always plausible. And the urgency ("redelivery fee required today") pushes people to click before verifying.
The scammers do not need to know you have a package coming. They just need the message to seem plausible enough that you click "just to check."
The psychology of delivery scams
- Plausibility: You probably are waiting for something. The message might be real.
- Routine behavior: Checking delivery status is a normal, low-stakes action. Clicking feels safe.
- Small amounts: A $1.99 "redelivery fee" seems harmless - worth paying to get your package.
- Urgency: "Final delivery attempt" or "return to sender" creates time pressure.
- Trusted brands: USPS, FedEx, UPS are trusted names. Impersonating them transfers that trust.
Real package scam messages (and why people fall for them)
Example 1: The address problem
What the message says:
"USPS: Your package cannot be delivered due to incomplete address information. Update here to schedule redelivery: [link]"
Why people fall for it:
- Address problems happen - this seems like a fixable issue
- USPS is a trusted sender
- Updating your address seems like the logical next step
- The link appears to lead to a solution
Safe response: Open the USPS app or usps.com directly. Track your package there. Real address issues are shown in tracking.
Example 2: The redelivery fee
What the message says:
"FedEx: Delivery attempted. Package will be returned to sender. Pay $1.99 redelivery fee to schedule new delivery: [link]"
Why people fall for it:
- The amount is small - seems worth it to get your package
- "Return to sender" creates urgency
- FedEx is a trusted brand
- Paying a small fee seems reasonable for a service
Reality: FedEx says it never requests payment or personal information in exchange for releasing a package, so a text demanding a redelivery fee is a red flag. This is a credit card harvesting scheme.
Safe response: Do not pay. Check tracking at fedex.com directly.
Example 3: The customs fee
What the message says:
"Your international package is held at customs. Pay $3.50 processing fee to release: [link]"
Why people fall for it:
- International shipping does involve customs
- Small processing fees seem plausible
- "Held at customs" sounds official
- You may actually have ordered something international
Safe response: Real customs fees are handled by the carrier and appear on official tracking pages, not random texts.
What if the text is about a package you never ordered?
Some delivery texts mention an order that doesn't exist. Others arrive when a box really does show up at the door, but you never bought anything. That second case is called a brushing scam, and the text or a "tracking link" that follows is not something to tap. Read our guide to brushing scams and packages you didn't order for what to do with the box and the account details attached to it.
How to spot a fake FedEx text
A fake FedEx text usually says a package is on hold, a delivery failed, or a small fee is due. The message pushes you to tap a link before you stop to check.
FedEx says it never requests payment or personal information in exchange for releasing a package. The one exception is international shipments, where FedEx may send a secure link to pay duties and taxes. For those, check the shipment and the amount on fedex.com before you pay.
FedEx lists these signs of a fraudulent text:
- A link to a ".shop" domain.
- An urgent request for money to deliver a package.
- A request for personal or financial information.
- A vague message about a problem with a shipment.
- A link that leads to a malicious site.
What to do: Don't reply or tap the link. Open fedex.com or the FedEx app and enter the tracking number yourself. Forward the message to abuse@fedex.com. If you see charges you don't recognize or get notices for packages you didn't ship or expect, FedEx lists a fraud line at 1.800.584.2681.
How to spot a fake UPS text
A fake UPS text says a package is waiting, then asks for personal information or a payment before delivery. UPS says scammers rely on urgency to create panic.
UPS says it doesn't request payments, personal information, financial information, account numbers, IDs, or passwords in an unsolicited way. Only a few shipments need a payment at delivery, such as collect on delivery, duties, or taxes. UPS says tracking the package is the safest way to check whether a fee is real.
What to do: Don't tap the link or open attachments. Open a new browser window and go to ups.com, then check the tracking number there. Report the message through the UPS online fraud form at ups.com/upsemail, then delete and block it. You can also report it to the FTC at reportfraud.ftc.gov.
What scammers get from delivery scams
How to check if a delivery text is real
USPS says its tracking texts and emails don't contain links. If a message with a link claims to be from USPS and you didn't ask for tracking, treat it as a scam.
What to do if you already clicked
If you clicked but did not enter anything
- Close the page immediately
- You are likely safe if you did not enter information
- Check your actual deliveries through official apps
- Block and report the text
If you entered payment information
- Contact your card issuer immediately
- Report the card as compromised
- Request a new card with a new number
- Document the transaction (screenshot, amount, date)
- Monitor statements for unauthorized charges
If you entered login credentials
- Go to the real carrier site (type URL yourself)
- Change your password immediately
- Check for unauthorized changes to your account
- Enable two-factor authentication if available
Contact the bank or card issuer. USPIS says to notify the financial institution if you interacted with the link, even if you didn't tap submit.
{{component-tips}}
How Guardio protects against delivery scams
Guardio helps flag lookalike delivery pages and phishing links as you browse, with the browser extension for Chrome and Edge and the Guardio apps for iOS and Android. A fake page can still look convincing, so check the tracking number on the carrier's own site before you enter anything:
- Lookalike domain detection: Domains like "usps-delivery-update.com" or "fedex-redelivery.net" are flagged even if they were registered today.
- Real-time page analysis: Guardio analyzes page behavior, not just appearance. Credential and payment harvesting pages are detected by their function.
- Link destination preview: Before a page loads, Guardio evaluates where you are actually going - catching redirects and shortened URLs.
- Cross-device coverage: Whether you click on your phone or computer, Guardio provides protection.
{{component-cta-custom}}
Report delivery scams
- USPS texts: Email spam@uspis.gov with the text pasted into the message, your name, and a screenshot showing the sender's number and the date. Forward the text to 7726 to help report the number.
- FedEx texts: Forward the message to abuse@fedex.com.
- UPS texts: Use the UPS online fraud form at ups.com/upsemail.
- Any carrier: Report it to the FTC at reportfraud.ftc.gov.
Sources
FAQs
Is it safe to click a delivery tracking link in a text?
It is safer to not click. Open the carrier app or official site directly and track there.
How do I verify a delivery message is real?
Check your order confirmation and track using official apps or sites you open yourself. Avoid tracking through message links.
Why do delivery scams ask for a small fee?
Fees can be a way to capture payment details. Legit carriers typically do not collect surprise fees through random text links.
What if I do have a package coming?
Track it through the retailer account or the carrier app. Do not rely on the text link.
Should I reply to the text?
No. Do not engage. Report and block if it is suspicious.
What should I do if I clicked?
Close the page. If you entered details, change passwords and monitor accounts for unusual activity.
Does USPS send tracking texts with links?
USPS says it sends tracking texts or emails only after a customer requests tracking with a tracking number, and those messages don't contain links. A message with a link that you didn't ask for is likely a scam.
Does FedEx text you to pay a fee?
FedEx says it never requests payment or personal information in exchange for releasing a package. For international shipments, it may send a secure link to pay duties and taxes, so check the shipment and the amount on fedex.com first.
Is a UPS text about a package waiting for me real?
Check before you tap. Open ups.com in a new browser window and enter the tracking number. UPS says it doesn't ask for payments or personal information in an unsolicited way.
How do I report a fake delivery text?
For USPS, email spam@uspis.gov and forward the text to 7726. For FedEx, forward it to abuse@fedex.com. For UPS, use the online fraud form. You can also report any of them to the FTC at reportfraud.ftc.gov.
Phishing ScamsSMS Phishing Explained: How to Spot Smishing and Stay Safe
