What Is the Fake Package Delivery Scam?
The fake package delivery scam is a phishing attack where scammers send text messages or emails impersonating major delivery services — UPS, FedEx, USPS, DHL, and Amazon Logistics. The message claims you have a package waiting, a delivery that needs to be rescheduled, or a shipping fee that must be paid before your package can be delivered. It includes a link to a fake website designed to steal your personal and financial information.
This scam has surged dramatically in 2026. With the explosion of online shopping, nearly everyone has a package in transit at any given time — which means a text about a "delivery issue" feels plausible to almost anyone. Scammers exploit this universal expectation, blasting millions of texts and emails knowing that a significant percentage of recipients will have a real package in transit and will click the link.
The scam works because it's a numbers game. If you send 100,000 fake delivery texts, even a 1% click rate gives you 1,000 potential victims. And because the messages reference real delivery companies and often arrive when people are genuinely expecting packages, the click rate is far higher than typical phishing.
How the Scam Plays Out
The scam typically follows a predictable sequence. First, you receive a text message that looks like it's from UPS, FedEx, USPS, or another delivery service. The message is brief and urgent: "Your package is on hold. Click here to confirm your address and schedule redelivery," or "Delivery attempt failed — $1.99 shipping fee required to release your package."
Second, the link in the text takes you to a professional-looking website that mimics the real delivery company's site — same logo, same colors, same layout. The site asks you to enter your personal information (name, address, phone number) to "verify your delivery details" or "update your shipping preferences."
Third, the site asks for payment — a small "redelivery fee," "shipping fee," or "customs charge" — usually $1 to $5, low enough that most people won't question it. You enter your credit card details. Now the scammer has your card number, CVV, and billing address.
In some variants, the site also asks for your email and password to "log in and track your package," capturing credentials that may be reused on other sites if you've recycled passwords. In more aggressive variants, the site installs malware or asks for your Social Security number for "customs verification."
Red Flags: How to Spot a Fake Delivery Text
Here are the specific signals that a package delivery notification is a scam:
1. The message comes from a phone number, not an official short code. Real delivery companies send automated notifications from short codes (5-digit numbers) or through their official apps. A text from a 10-digit phone number claiming to be UPS is almost always a scam.
2. You're asked to pay a fee to receive a package. Legitimate delivery services do not charge redelivery fees via text link. If a shipping fee or customs charge is genuinely owed, it's handled through official channels — not a random payment link in a text message. Real customs fees are collected by your country's postal or customs service, not by UPS or FedEx via text.
3. The link doesn't go to the official delivery company website. Hover over the link (or long-press on mobile) to see the real URL. If it goes to ups-tracking-update.com, fedex-delivery-notice.net, or any domain that isn't ups.com, fedex.com, or usps.com, it's a scam.
4. The message is generic and doesn't include specific tracking details. Real delivery notifications include your tracking number and specific delivery details. A message that says "your package" without any tracking number or specific information is a mass blast, not a real notification.
5. You weren't expecting a package. If you don't have anything on order and a delivery text arrives out of the blue, it's almost certainly a scam. Scammers send millions of texts hoping to catch people who happen to be expecting a delivery and will assume the text is about their real order.
What to Do If You Receive a Fake Delivery Text
Do not click the link. Do not enter any personal or payment information. Delete the message. If you're genuinely expecting a package, check the tracking status through the retailer where you made the purchase or through the delivery company's official website or app — never through a link in a text message.
If you already clicked the link and entered payment information, contact your credit card company immediately to report the fraud and request a new card. Monitor your statements for unauthorized charges. If you entered login credentials, change your password on that account and anywhere else you used the same password, and enable two-factor authentication.
Report the scam to the FTC at reportfraud.ftc.gov. You can also report phishing texts to your mobile carrier by forwarding the message to 7726 (SPAM) — most major carriers support this free reporting service.
How to Protect Yourself Going Forward
The best defense against fake package delivery scams is to never click links in unsolicited delivery notifications. Instead, track your packages through the retailer's website or the delivery company's official app. Most major retailers send their own shipping notifications with tracking links that go directly to the carrier's official site.
Be especially cautious of any delivery message that asks for payment. Real delivery companies do not charge redelivery fees, customs fees, or shipping fees via text link. If a fee is genuinely owed (such as for international customs), you'll receive an official notice — not a random text demanding $1.99.
And if you receive a suspicious delivery link, run it through Scam Detective before you click. For $1, you'll get an instant 0–100 scam risk score, a plain-English verdict, and the top red flags — including domain age, impersonation signals, and phishing markers. That's a small price to pay to avoid a stolen credit card. For more on phishing scams that use delivery and order notifications, read our guide on fake purchase alert scams and our guide on Amazon impersonation scams.