Fake Package Delivery Texts: How the Scam Works and How to Check Real Tracking

“USPS: Your package could not be delivered due to an incomplete address. Update your details within 24 hours to avoid return: [link].”

If a text like that landed on your phone this week, you’re in good company. The FTC says fake package delivery problems were the most reported type of text scam in 2024. The message feels believable because most of us have something on the way at any given time. That’s exactly what the scammers are counting on.

This guide explains how the scam works, the simple way to check whether a package is really delayed and what to do if you already tapped the link or paid the fee.

How a fake delivery text works

The script is short and almost always follows the same pattern:

1. The hook. A text says a package is held, delayed, undeliverable or waiting on an address update. It names USPS, UPS, FedEx, DHL or Amazon.
2. The pressure. A deadline: “within 24 hours,” “today” or “before it is returned to sender.”
3. The link. A web address that looks almost right, often with extra words, odd domain endings or a URL shortener.
4. The fake site. The page copies the carrier’s logo, colors and layout. The FTC describes these as sites that look like the real USPS site but aren’t.
5. The ask. A tiny “redelivery fee” or “address correction fee,” often a couple of dollars, plus your name, address, phone number and full card details. Some versions also ask for your date of birth or Social Security number.

The small fee is the trick. Nobody worries much about a $1 or $2 charge, so people type in their card number without thinking. The scammer’s real goal is the card data and personal details, which can be used for larger fraudulent charges, sold or used to open accounts in your name.

Key takeaway: The fee is bait. The scam is about stealing your card number and identity, so even a tiny “redelivery charge” is a reason to stop.

Why real carriers don’t text you for fees

Each major carrier has published guidance that lines up with the same rule: don’t pay through a link in an unexpected text.

• USPS. The U.S. Postal Inspection Service says USPS sends tracking texts or emails only when a customer has requested them with a tracking number, and those messages won’t contain a link. USPS also doesn’t charge for those notification services.
• FedEx. FedEx states that it does not request payment or personal information through unsolicited mail, email or SMS in return for goods in transit or in its custody.
• UPS. UPS warns that fraudulent messages typically ask for personal information or a payment before a package is delivered, and that links in these texts may lead to malware or fake websites. It advises verifying any tracking number on its own website.

There is one nuance worth knowing. International shipments can carry legitimate customs duties or taxes, and carriers do collect them. But a real duty charge shows up in the carrier’s official tracking or your account when you look it up yourself. You never need to tap a link in a random text to pay it.

How to check real tracking in under 2 minutes

Instead of tapping, verify on your own terms:

1. Ask yourself if you ordered anything. No order means no package. Delete the text.
2. Go to the store you bought from. Open the retailer’s app or website and look at your order. It shows the carrier and the real tracking number.
3. Type the carrier’s address yourself. Enter usps.com, ups.com or fedex.com in your browser or open the carrier’s official app. Paste the tracking number from your order, not from the text.
4. Compare the details. If the official tracking shows the package moving normally, the text was fake.
5. Call if something is truly wrong. Use the phone number on the carrier’s official website, not one listed in the text.

USPS customers can also sign up for Informed Delivery on usps.com, which shows incoming mail and packages tied to your address. That gives you a trusted place to check, so a random text has nothing to add.

Red flags at a glance

Variations to watch for

The delivery script keeps evolving. Common versions include:

• “Incomplete address.” Asks you to “confirm” your address and then pay to reschedule.
• “Customs fee.” Claims an international parcel needs a duty payment before release.
• “Reply Y.” Asks you to reply and then reopen the text so the link becomes clickable. Replying also confirms your number is active.
• “Delivery attempted.” Claims a driver couldn’t reach you and offers a reschedule link.
• Email versions. The same story with a fake shipping label attachment, which may carry malware.

The same playbook shows up in other text scams too, such as the unpaid toll text scam and fake bank alerts. Our guide on how to spot a scam text covers the broader warning signs.

What to do if you tapped the link or paid

Tapping a link alone usually isn’t a disaster, but don’t ignore it. Act based on how far you got.

If you only opened the page

• Close it and don’t return.
• Make sure your phone’s operating system and browser are up to date.
• The Postal Inspection Service recommends telling your financial institution if you interacted with the URL, even without submitting anything. It’s a quick call and a smart precaution.

If you entered card details or paid

1. Call your card issuer now. Report the charge as fraud, ask for a new card number and dispute the fee.
2. Watch your statements. Scammers sometimes test a stolen card with tiny charges before making bigger ones.
3. Turn on transaction alerts in your banking app.

If you entered your SSN, birthdate or account logins

• Change passwords for any accounts you entered, starting with email and banking.
• Go to IdentityTheft.gov for a personalized recovery plan.
• Consider placing a credit freeze with Equifax, Experian and TransUnion. Our guide on how to freeze your credit walks through it.

If anything on your phone seems off afterward, such as new apps or strange pop-ups, check our guide on how to tell if your phone is hacked. For a broader first-hour plan, see what to do if you got scammed.

How to report a fake delivery text

Reporting helps carriers and agencies block the numbers and take down the sites:

• Forward the text to 7726 (it spells SPAM). This alerts your wireless carrier.
• Use your messaging app’s “Report junk” option in Apple Messages or Google Messages.
• USPS scams: Email spam@uspis.gov with the text pasted in (don’t click the link), a screenshot showing the sender number and date, your name and whether you lost money.
• FedEx scams: Forward to abuse@fedex.com.
• UPS scams: Use the fraud reporting page on ups.com.
• Everyone: Report at ReportFraud.ftc.gov, and at ic3.gov if you lost money.

Then delete the text and block the number. Our guide on how to report a scam explains which agency handles what.

Where to start: protect your phone from the next one

1. Turn on spam filtering. iPhones can filter unknown senders in Messages settings, and Android’s Google Messages has built-in spam protection.
2. Only track packages through official apps or the retailer’s order page.
3. Never pay a delivery fee by text. Make it a household rule.
4. Use a credit card, not debit, for online shopping. Credit cards usually offer stronger fraud protections if your number is stolen.
5. Talk to older relatives. A one-minute heads-up about “fake package texts” prevents a lot of losses.

Small sellers who ship often can also review carrier options and official notification tools in our USPS vs UPS vs FedEx comparison.

Conclusion

Fake delivery texts work because they’re short, believable and cheap to send. Your defense is just as simple: don’t tap, and check tracking yourself through the retailer or the carrier’s official site. If you already paid, call your card issuer the same day. Then forward the text to 7726 and report it, so the next person is less likely to fall for it.

Sources

• U.S. Postal Inspection Service: Smishing — USPS texts only on request and without links, how to report to spam@uspis.gov
• FTC Data Spotlight: Top text scams of 2024 — package delivery problems as the most reported text scam, fake USPS sites and redelivery fees
• FedEx Service News — FedEx does not request payment or personal information by unsolicited SMS; report to abuse@fedex.com
• UPS: Protect yourself from fraud and scams — signs of fraudulent UPS messages and how to verify tracking