Introduction
Have you ever received a text message saying there’s a problem with a package delivery?
Maybe the shipping company couldn’t verify your address. Perhaps your package is waiting at a distribution center, or you need to pay a small fee before it can be delivered.
The message includes a link to fix the problem. Since you’ve probably ordered something online recently, you click it without thinking twice.
Unfortunately, that ordinary-looking delivery notification could be a scam designed to steal your personal or financial information.
Because so many people online shop nowadays, cybercriminals have plenty of opportunities to catch potential victims off guard.
How Fake Delivery Notifications Work
Delivery notification scams usually begin with a text message or email that appears to come from a familiar shipping company, such as USPS, UPS, FedEx, or DHL.
The message claims there’s a problem with your delivery. They might claim that your address is wrong or incomplete, you have an outstanding shipping charge, or they couldn’t deliver the package for some other reason.
To resolve the issue, they tell you to click a link. Sounds simple enough, right?
Unfortunately, that link may lead to a fraudulent website designed to look almost identical to the real shipping company’s website. Once there, you might be asked to confirm your name, address, phone number, or payment information.
The scammers aren’t trying to deliver a package. They’re trying to collect your information.
This type of attack is called smishing, which is simply phishing that’s conducted through text messages.
Why Are These Scams So Effective?
How often do you receive packages?
Maybe you ordered household supplies from Amazon, bought something from an online retailer, or sent a gift to a family member.
Now imagine receiving a text saying your package couldn’t be delivered because your address was incomplete.
Would you remember which shipping company was handling every order? Probably not, and that’s exactly what scammers are counting on.
They don’t necessarily need to know whether you’re expecting a delivery. They can send similar messages to thousands of people, knowing that some recipients will have packages on the way.
The timing alone can make a fake message seem legitimate.
There’s also the matter of urgency. If you believe your package might get returned to the sender, then you may rush to correct the supposed problem before checking whether the message is real.
USPS Has Warned About These Messages
In April 2025, the Federal Trade Commission warned consumers about fraudulent delivery notifications impersonating USPS and other shipping companies. These messages often direct recipients to lookalike websites where scammers collect personal and financial information.
The United States Postal Inspection Service has issued similar warnings about unsolicited tracking messages. USPS says it doesn’t send unsolicited text messages containing links about package tracking. Customers must first request tracking updates for a specific package.
In other words, an unexpected text asking you to click a link and correct a delivery problem should immediately raise suspicion.
It’s Only a Small Fee. What’s the Harm?
Some fraudulent delivery notifications ask you to pay a small redelivery or processing fee. Maybe it’s just 30 cents or a couple of dollars. That might seem harmless, especially if you’re waiting for an important message.
Unfortunately, the fee isn’t necessarily the real objective. That fraudulent payment page may collect your credit card number, expiration date, security code, billing address, and other personal information.
Once criminals have those details, they may attempt unauthorized transactions or use the information in other scams.
There’s another problem, too. Some messages direct you to fake account login pages. If you enter your username and password, the criminals may gain access to your real shopping or delivery account.
A tiny delivery fee could end up costing considerably more than you expected.
How Can You Tell if a Delivery Notification Is Fake?
Legitimate shipping companies do send tracking updates and delivery alerts. The trick is knowing how to verify them.
Start by looking for these warning signs:
- Unexpected links. Be suspicious of messages directing you to unfamiliar websites, especially when you never requested tracking updates.
- Requests for payment information. Don’t enter credit card details through a link in an unexpected delivery notification.
- Urgent warnings. Claims that your package will be destroyed, returned immediately, or permanently lost may be attempts to pressure you.
- Unusual website addresses. A legitimate-looking logo doesn’t make an unfamiliar website trustworthy.
- Requests for sensitive information. Shipping companies shouldn’t need your account password or banking credentials to confirm an ordinary delivery.
Scammers can also disguise sender information, a trick known as spoofing. A message isn’t automatically legitimate just because it appears to come from a familiar name or number.
What Should You Do Instead?
If you receive a suspicious delivery notification, don’t click the link without investigating. Instead, open the shipping company’s official website or app yourself.
If you have a tracking number, enter it directly into the company’s tracking system. You can also check your original order confirmation to determine which carrier is handling your shipment.
If there’s a genuine delivery problem, you should be able to verify it through those trusted channels.
You can also report suspicious text messages through your phone’s spam-reporting feature or forward them to 7726, a number used by major U.S. mobile carriers to collect spam reports.
If you’ve already entered payment information into a suspicious website, then contact your bank or card issuer immediately.
Conclusion
Delivery notifications are supposed to make online shopping more convenient. Unfortunately, criminals have learned to use that convenience against us.
A simple message about an incomplete address or missed delivery can seem especially convincing when you’re already expecting a package.
Always verify unexpected shipping messages before taking action.
Don’t trust a link simply because the message mentions a familiar delivery company. Check the tracking information through the company’s official website or app instead.
After all, a package delivery should bring something to your doorstep—not give criminals access to your personal information.
