Total Defense makes internet security easy for you and tough on destructive malware. We don’t just protect devices, we protect people.

Package delivery scams work because they hit at the perfect moment: you are busy, expecting a shipment, and a text says there is a problem. Scammers know people will click fast if a message claims a package is delayed, held, missing postage, or needs an address update.

What is a package delivery scam?

A package delivery scam is a phishing or “smishing” attack that pretends to come from a trusted carrier like USPS, FedEx, UPS, DHL, or another delivery service. The message usually says there is an issue with your shipment and asks you to click a link.

That link may lead to a fake website designed to steal:

• Your name and address
• Credit card information
• Login credentials
• Social Security number
• Phone number
• Delivery preferences
• Other personally identifiable information

The FTC warns that fake delivery messages often send people to look-alike websites that capture personal or financial information. [consumer.ftc.gov]

Why are fake delivery texts so common?

Package scams are easy for criminals to scale because almost everyone orders online. Even if you are not expecting a delivery, there is a good chance someone in your household is.

According to the FTC’s Top text scams of 2024 report, consumers reported $470 million in losses to text scams in 2024, and fake package delivery problems were the most commonly reported type of text scam.

How do package delivery scams work?

Most scams follow a simple script:

1. You receive an unexpected text or email.
2. The message says your package is delayed, undeliverable, or missing information.
3. The message includes a link.
4. The fake site asks you to confirm personal information or pay a small “redelivery fee.”
5. The scammer captures your information or payment details.

The U.S. Postal Inspection Service says USPS does not send texts or emails with links unless the customer first requested tracking for a specific package, and USPS does not charge for its package tracking tools.

What are the red flags of a fake delivery message?

Watch for these warning signs:

• The message is unexpected.
• The sender uses a strange phone number or email address.
• The link does not go to the official carrier website.
• The message asks for a credit card to release a package.
• The text asks for your Social Security number or account password.
• The message creates urgency, saying your package will be returned.
• The wording is vague and does not include a real order number.

The FTC recommends not clicking links in unexpected delivery messages and instead checking shipping status through the retailer or carrier website you know is real. [consumer.ftc.gov], [consumer.ftc.gov]

What should you do if you get one?

Use this safer approach:

• Do not click the link.
• Do not reply to the message.
• Go directly to the retailer’s website or app.
• Enter the tracking number manually on the official carrier site.
• Forward suspicious texts to 7726, which helps wireless providers block similar scams.
• Report scams to the FTC at ReportFraud.ftc.gov.

What if you already clicked?

If you entered information:

• Contact your bank or card issuer immediately.
• Change passwords for affected accounts.
• Watch for unusual charges.
• Run a malware scan if you downloaded anything.
• Report the scam to the FTC.

Package delivery scams are designed to catch you in a hurry. Slow down, avoid links in unexpected delivery texts, and verify shipping details directly through the store or carrier website. That quick pause can protect your money, identity, and personal information.

---

Traveling is fun. Losing access to your email, bank account, or phone while traveling? Not so much. Whether you’re heading out for a weekend trip or flying internationally, your devices carry a lot of sensitive information: photos, passwords, banking apps, work files, travel confirmations, and personal messages. A few simple cybersecurity habits can help protect […] Read More»