Few messages feel as routine as “your package could not be delivered.” Scammers know that, and they send huge numbers of near-identical notices hoping that a few land when someone really is waiting for a parcel. The messages are not clever, but they work because they arrive at the right moment and ask for something small.
What these messages usually look like
Fake delivery notices arrive by text, email, messaging apps and sometimes automated phone calls. Common versions say that:
- a parcel is waiting and needs a small fee for redelivery or customs
- an address is incomplete and must be confirmed
- a delivery attempt failed and will be returned unless you act
- a tracking number needs to be “activated” or verified
They almost always include a link or a phone number. The link leads to a page styled to look like a courier, a post office or a retailer, where you are asked for your name, address, phone number, a code sent to your phone or card details. Even a “small fee” of a dollar or two can be a way to capture a card number that is then used for larger charges.
Why they work
These scams rely on a few ordinary feelings. Many of us order things all the time and cannot recall every purchase. We also do not like missing deliveries, and a deadline (“returned in 24 hours”) makes us act before thinking. The approach is the same one behind other text message scams: create mild urgency, offer an easy fix and attach a link.
Being fooled says nothing about how smart you are. Even careful people click occasionally, which is why it is good to know what to do afterward.
Warning signs worth noticing
No single sign proves a message is fake, but several together are a strong hint.
- You were not expecting anything. If you have no open orders, a notice about a parcel is suspicious. Be careful too if you do have orders, because the scam is designed to catch you in that situation.
- The sender is vague. Real notices usually mention the retailer or the exact service. A generic “your parcel” with no order details is a flag.
- The number or address looks odd. Texts from long strings of digits, personal-looking email addresses or random domains are typical. Learning to read lookalike web addresses helps, as scammers often use a real courier’s name inside a longer, unrelated address.
- There is a payment demand. A true delivery usually does not require you to type full card details into a link from a text message. Some legitimate carriers do collect fees for customs, duties or redelivery, so check through their official channel instead of the message.
- Urgency and threats. Short deadlines and warnings about returns or fines are pressure tactics.
- Mistakes and odd wording. Poor grammar, strange spacing or inconsistent branding can be signals, although well-made fakes can look polished.
- Requests for a code. If a message asks you to reply with a verification code sent to your phone, stop. Those codes protect your accounts, and sharing them can hand your account to someone else.
How to check a delivery safely
The simplest rule is: do not use the link or phone number in the message. Verify through a route you control.
- Check your own records. Look in your email or the retailer’s app for an order confirmation and tracking number.
- Go to the source yourself. Open the retailer’s app or type the retailer’s or carrier’s address into your browser, or use a bookmark. Enter the tracking number there.
- Compare details. Does the tracking number in the message match the one in your confirmation? Does the delivery estimate make sense?
- Look for a note at your door. Genuine carriers typically leave a notice, and you can contact the carrier using the details on the official site.
- Ask the person who sent it. If a parcel is supposedly a gift, ask the sender directly.
- Wait. If you cannot confirm anything, doing nothing costs little. A real delivery is rarely lost because you did not respond to a text within the hour.
If you only have a vague suspicion, it is fine to forward a suspicious text to your carrier’s spam-reporting service, if your mobile carrier offers one, then delete it. Check your mobile provider’s help pages for how.
If you already clicked or typed something
Clicking a link alone often does little, though it depends on the page and your device. What matters is what happened next.
- If you only opened the page, close it, avoid entering anything and consider running your device’s update and security check. Understanding safe browsing habits helps you decide what is worth worrying about.
- If you entered card details, contact your card issuer right away, using the number on the card, and ask to cancel or replace the card. Review recent charges.
- If you entered a password, change it on the real site and anywhere else you used it, and enable two-step sign-in.
- If you entered personal information such as your address and date of birth, be more alert to later phishing messages and consider the steps people use to guard against identity theft, such as monitoring your accounts or placing a credit freeze.
- If you installed something from the page, it may be malicious. Disconnect from the internet, run a security scan and consider asking a trusted technician for help. A password change from a clean device is a sensible next step.
- If you shared a one-time code, contact the affected service immediately and secure the account.
If you lost money, report it to your bank and your local police or national fraud-reporting service. If you feel embarrassed, remember that this scam is built to be convincing.