How to spot delivery scam smishing

That little buzz in your pocket often brings a moment of excitement: Your package is on its way!

We are constantly checking our phones, waiting for tracking updates, and anticipating that front-door delivery. Scammers know this anticipation is high, and they are masters at exploiting it. That’s why you need to be on high alert for a massive spike in delivery scam smishing.

What in the World is “Smishing”?

“Smishing” is just a catchy term for SMS phishing. Phishing is the use of emails or messages designed to trick you. Since most of us have learned to spot a poorly-written email scam, criminals have shifted their game to text messages, where we tend to be less cautious.

A typical delivery smishing scam works like this:

1. The Message Arrives: You get a text message—seemingly from FedEx, USPS, or Amazon—stating there’s a problem with your package. It might say a delivery fee is due, your address is wrong, or the package is “pending.”
2. The Pressure is On: The message includes a link and usually carries a sense of urgency. “Click here within 24 hours or your package will be returned!”
3. The Trap: If you click that link, you aren’t taken to a real delivery service website. You are taken to a fake, look-alike site designed to steal your credit card information, your login credentials, or, worst of all, install malware onto your phone.

Your Best Defense: Verify, Don’t Click

The key to beating these scams is to adopt a simple, three-second rule: Never click on a link in an unsolicited text message.

Instead of clicking that link, follow these steps to verify any suspicious message:

1. Take Note of the Details: Look at the supposed tracking number or the company name.
2. Close the Text Message: Don’t interact with it at all.
3. Go Direct: Verify the information through the company’s official website or app. Do not use the link the scammer provided.
4. If it’s Amazon: Open the official Amazon app (or type amazon.com into your browser) and check your “Your Orders” page. If there is a legitimate issue, it will be clearly posted there.
5. If it’s FedEx or UPS: Open their official app or website. Copy the tracking number from the suspicious text and paste it directly into the official tracking tool. If the tracking number is fake, the tool won’t find anything.

Delivery scams succeed because they catch you when you’re distracted and expecting a delivery. By remaining skeptical, closing the message, and verifying information through official channels, you stop the scammer dead in their tracks. Protect your phone, and make sure your package is the only thing that arrives!