Fake Package Delivery Texts: How to Spot Them and What to Do
“Your package could not be delivered. Update your address here.” Messages like this can look very convincing. Many are fakes designed to steal your personal or financial information.
Red Flags in a Delivery Message
- It says you missed a delivery and asks you to click a link to reschedule.
- It asks you to “update” your address or shipping preferences before an item can ship.
- It asks for a small fee to release or redeliver a package.
- It warns the package will be returned if you don’t act right away.
- It asks for your password, card number, or Social Security number.
- You weren’t expecting a package, or you never signed up for tracking texts.
The U.S. Postal Inspection Service says USPS sends tracking texts or emails only when you’ve asked for them for a specific package, and those messages won’t contain a link. The FTC warns that links in fake messages can lead to look-alike websites or install harmful software that steals logins.
How to Check Tracking Safely
- Don’t tap the link or call any number in the message.
- If you ordered something, go to the store’s website or app yourself and check your order status there.
- Or type the shipping company’s web address into your browser, or call a number you know is real, and enter your tracking number from your order confirmation.
What to Do If You Clicked
It happens to a lot of people. These messages are built to look real. Here are steps to take:
- Contact your bank or card company. The Postal Inspection Service suggests doing this even if you didn’t type anything into the page.
- If you entered a password, change it on the real website, and change it anywhere else you use the same one.
- If you shared your Social Security number or other personal details, visit IdentityTheft.gov for a step-by-step plan.
- If you paid a fee, call your card company or bank right away and ask for a refund.
How to Report It
- Forward the text to 7726 (that spells SPAM). The FCC and FTC say this helps your wireless carrier block similar messages.
- Use the “Report Junk” or spam option in your messaging app, if your phone has one.
- For fake USPS messages, email spam@uspis.gov. Copy the text into a new email without clicking the link, and attach a screenshot showing the sender’s number and date.
- Report it to the FTC at ReportFraud.ftc.gov. If you lost money online, you can also report to the FBI at ic3.gov.
- If you’re 60 or older and lost money, call the Department of Justice’s National Elder Fraud Hotline at 1-833-FRAUD-11 (1-833-372-8311), Monday through Friday, 10 a.m. to 6 p.m. Eastern Time. It’s free, it’s for people 60 and older, and a case manager can help you figure out where to report.
- For free guidance, call the AARP Fraud Watch Network Helpline at 877-908-3360, Monday through Friday, 8 a.m. to 8 p.m. Eastern Time. It offers free support and guidance, whether or not you’re an AARP member.
