Scam Detective

Package Delivery Scams: How to Spot Fake Shipping Notifications

February 28, 2026

You get a text: "USPS: Your package cannot be delivered due to an incomplete address. Update your information here:" followed by a link. It looks official. You might even be expecting a package. But the link doesn't go to USPS — it goes to a fake site designed to steal your personal information or credit card number.

Package delivery scams are the single most reported smishing attack in the United States. The USPS, FedEx, UPS, and Amazon brands are spoofed constantly because nearly everyone orders things online and is primed to expect delivery notifications.

How Package Delivery Scams Work

The scam follows a simple formula:

  1. The hook: A text or email claims there's a problem with your delivery — wrong address, customs fee, failed delivery attempt, or a package "on hold."
  2. The urgency: Your package will be returned to sender, you'll be charged a fee, or the delivery window will expire.
  3. The link: You're directed to a website that looks like the real carrier's site. It asks for your name, address, phone number, and often a credit card to pay a small "redelivery fee" (usually $1–3).

The small fee is the key. Scammers know you won't think twice about paying $1.95 to get your package. But the real goal is your credit card number — which they'll use for larger charges or sell on dark web marketplaces.

Some variants skip the fee and instead ask you to "confirm your identity" with your Social Security number or driver's license number, claiming it's required for package verification.

What Real Carrier Notifications Look Like

USPS

  • Texts come from short code 28777 (for USPS Tracking) — not a regular phone number
  • USPS will never ask for payment via text
  • Tracking links go to tools.usps.com — nothing else
  • USPS only sends texts if you specifically signed up for Informed Delivery or text tracking

FedEx

  • Texts come from short code 33339
  • Links go to fedex.com only
  • FedEx does not charge redelivery fees via text

UPS

  • Texts come from short code 94601 or 69877
  • Links go to ups.com only
  • UPS Follow My Delivery requires opt-in — unsolicited texts are not from UPS

Amazon

  • Delivery updates come through the Amazon app or from @amazon.com email addresses
  • Amazon does not text you from random numbers about delivery problems

Red Flags in Fake Delivery Messages

The sender is a regular phone number. Legitimate carriers use short codes, not 10-digit numbers.

The link domain is wrong. Look for domains like usps-delivery-update.com, fedex-redelivery.info, or ups-package-hold.xyz. The real carrier name might appear in the URL, but the actual domain (the part before the first /) is what matters.

You didn't sign up for tracking notifications. If you never opted in to text tracking for a specific package, any delivery text is unsolicited and likely a scam.

There's a small fee involved. USPS, FedEx, and UPS do not charge redelivery fees via text message. If a text asks for payment, it's a scam.

The tracking number is missing or generic. Real delivery notifications include your actual tracking number. Scam texts often say "your package" without any identifying details because they're sent to millions of numbers.

What to Do with a Suspicious Delivery Text

  1. Don't tap the link. If you're expecting a package, go directly to the carrier's official website or app and enter your tracking number there.
  2. Check the tracking number. Paste it into the search bar at the top of this page or into the carrier's official site. If the tracking number doesn't exist, the text is fake.
  3. Report it. Forward the text to 7726 (SPAM) to report it to your carrier. You can also report USPS-impersonating texts to spam@uspis.gov.
  4. Block and delete. Block the sending number and delete the message.

The Holiday Spike

Package delivery scams peak during November and December when online shopping surges. Scammers know that during the holidays, almost everyone is waiting for at least one package, making the "delivery problem" pretext highly believable.

But they run year-round. The rise of year-round online shopping means there's no bad time for scammers to send fake delivery texts — someone on the receiving end is almost always expecting something.

Already Clicked a Link?

If you entered information on a fake delivery site:

  • Credit card: Call your card issuer immediately to report the compromise and request a new card number. Monitor statements for unauthorized charges.
  • Personal information (SSN, driver's license): Freeze your credit at all three bureaus (Equifax, Experian, TransUnion) and file an identity theft report at IdentityTheft.gov.
  • Address and phone number: Less immediately dangerous, but you may see an increase in scam calls and texts as this information gets sold to other scammers.

The damage-control steps are the same regardless of scam type — check the sidebar for our full guide on what to do if you gave info to a scammer.