Protect yourself from online scams
Chapters (12)
Package delivery scams
In 2024, delivery notification scams increased by 174%, exploiting our reliance on online shopping and package deliveries. These scams impersonate trusted logistics companies to steal personal information, payment details, and credentials.
The Scale of the Problem
2024 Statistics:
- 174% increase in delivery service smishing
- USPS most impersonated carrier (40% of fake messages)
- $1.99 typical fake “redelivery fee” to steal payment info
- 26% click-through rate on fake delivery links
- Messages spike during holiday shopping seasons (Nov-Jan)
Common Delivery Scams
1. Fake Delivery Failure Notices
Scammers send texts or emails claiming your package couldn’t be delivered:
USPS: Your package could not be delivered.
Update your address to reschedule delivery:
[shortened link]
Reality: USPS leaves physical notices and updates via their official app.
2. Redelivery Fee Scams
Messages claim you need to pay a small fee ($1.99-$3.99) to receive your package:
FedEx: Your package is awaiting delivery.
Pay $1.99 redelivery fee here: [link]
Reality: Legitimate carriers don’t charge redelivery fees via text message links.
3. Customs/Tax Payment Scams
For international shipments, scammers claim customs fees are due:
Your package from China is held at customs.
Pay import tax ($35.67) to release: [link]
Reality: Customs fees are paid through official government websites or at delivery.
4. Package Survey Scams
Fake surveys about your delivery experience that lead to phishing:
How was your Amazon delivery experience?
Take our 30-second survey and get a $50 gift card!
Reality: Legitimate surveys don’t promise rewards or ask for payment info.
5. Delivery Driver Impersonation
Scammers pose as drivers asking for gate codes, access, or “verification”:
Hi, I'm your UPS driver. I need your gate code
to deliver your package today. Reply with code.
Reality: Drivers have access codes provided by facilities or will call officially.
Red Flags: How to Spot Fake Delivery Messages
🚩 Unexpected notification for package you didn’t order 🚩 Shortened URLs (bit.ly, tinyurl) instead of official domains 🚩 Payment requests via text message link 🚩 Urgent language (“final attempt,” “expires today”) 🚩 Generic greetings (“Dear Customer” instead of your name) 🚩 Spelling errors in company name or message 🚩 Suspicious sender (not from official carrier number/email) 🚩 Requests for sensitive info (SSN, password, full card number) 🚩 Prize or reward for completing survey 🚩 Pressure to act immediately without verification
What Legitimate Carriers Actually Do
USPS (United States Postal Service)
- ✅ Leaves pink notice slips (PS Form 3849) for missed deliveries
- ✅ Sends tracking updates via USPS.com (if you enrolled)
- ✅ Never sends payment requests via text
- ✅ Official texts come from 28777 or 2USPS (if enrolled)
FedEx
- ✅ Sends tracking updates from
@fedex.comemail addresses - ✅ Texts from 37773 (if you enrolled in FedEx Delivery Manager)
- ✅ Never charges redelivery fees
- ✅ Provides tracking numbers you can verify on FedEx.com
UPS
- ✅ Sends notifications from
@ups.comemail addresses - ✅ UPS My Choice members get texts from 63679
- ✅ Never asks for payment via text message
- ✅ Tracking numbers verifiable on UPS.com
Amazon
- ✅ Sends order notifications from
@amazon.comaddresses - ✅ All tracking available in your Amazon account/app
- ✅ Never sends survey links with reward promises
- ✅ Customer service accessed through your account, not links
Verification Procedures
Before Clicking Any Link:
- Don’t click links in unexpected delivery messages
- Open carrier app or website independently
- Type the official URL directly (usps.com, fedex.com, ups.com)
- Use your bookmarked links
- Use official mobile apps
- Check your order history
- Review recent purchases
- Verify you’re expecting a delivery
- Examine the tracking number
- USPS: 20-22 digits, starts with 94 or 93
- FedEx: 12-14 digits
- UPS: Starts with “1Z”
- Amazon: TBA followed by 13 digits
- Verify sender information
- Check sender email domain carefully
- Look for official carrier phone numbers
If You’re Unsure:
- Call official customer service (number from carrier’s website, not message)
- Visit carrier location with tracking number
- Check your email for order confirmations from actual retailers
- Use official apps to track all shipments
Real-World Examples
Case Study 1: Holiday Season USPS Scam (December 2024)
During Black Friday week, scammers sent 2.3 million fake USPS texts:
USPS: Your package (tracking: 9400123456789) requires
address update. Confirm here: usps-delivery[.]com/update
Red flags:
- Domain was
usps-delivery[.]com(notusps.com) - No package expected
- Tracking number format incorrect
- Asked for SSN and payment info on “verification” page
Result: Victims who entered information had identities stolen and bank accounts drained.
Case Study 2: Fake Amazon Delivery Survey (Summer 2024)
Scammers impersonated Amazon with prize survey scams:
Your Amazon package was delivered! Rate your
driver and claim your $100 Amazon gift card: [link]
Red flags:
- Link went to amazon-rewards[.]net (not amazon.com)
- No recent Amazon delivery occurred
- Gift card promise too good to be true
- Asked for credit card for “$1 processing fee”
Result: Credit card information stolen, used for fraudulent purchases.
Case Study 3: FedEx Redelivery Fee Scam (October 2024)
Targeted scam during holiday shopping season:
FedEx: Delivery attempt failed. Your package
will be returned unless you pay $2.99 redelivery
fee within 48 hours: [link]
Red flags:
- FedEx doesn’t charge redelivery fees
- Urgency (“48 hours”)
- Payment link instead of official FedEx site
- Sender was “FedEx” but email was delivery-update@fed3x[.]com
Result: Payment information stolen, multiple fraudulent charges followed.
Protection Strategies
For Individuals:
-
Enroll in official tracking programs
- USPS Informed Delivery (see mail before it arrives)
- FedEx Delivery Manager
- UPS My Choice
- Amazon app notifications
-
Use official mobile apps
- USPS Mobile® app
- FedEx® Mobile app
- UPS Mobile app
- Amazon Shopping app
-
Set up delivery preferences
- Hold packages at facilities
- Require signature
- Set specific delivery instructions
-
Enable account security
- Strong passwords for carrier accounts
- Two-factor authentication where available
- Monitor account activity regularly
-
Track orders at source
- Keep retailer order confirmation emails
- Use retailer’s tracking links, not random texts
- Check retailer website for status updates
General Best Practices:
- Never click links in unexpected delivery texts
- Always type URLs directly or use official apps
- Don’t provide payment info via text message links
- Verify tracking numbers through official channels
- Be extra cautious during holiday seasons
- Report suspicious messages to carrier fraud departments
What To Do If You Fell for a Delivery Scam
Immediate Actions:
-
Don’t panic, but act quickly
- Time is critical for damage control
-
If you entered payment information:
- Call your bank/card issuer IMMEDIATELY
- Report the fraud and request new cards
- Dispute any unauthorized charges
- Monitor accounts daily for 60 days
-
If you entered personal information:
- SSN entered: Place fraud alert with credit bureaus (Equifax, Experian, TransUnion)
- Address/phone entered: Monitor for identity theft
- Email/password entered: Change passwords on all accounts immediately
- Enable two-factor authentication everywhere possible
-
Document everything:
- Screenshot the fake message
- Save the fraudulent website URL
- Note date/time you interacted with scam
- Keep records of all fraud reports
Report the Scam:
- FTC: ReportFraud.ftc.gov
- FBI IC3: ic3.gov (if over $1,000 lost)
- Actual carrier:
- USPS: uspis.gov/report
- FedEx: fedex.com/en-us/trust-center/report-fraud.html
- UPS: ups.com/us/en/help-center/report-fraud.page
- Amazon: amazon.com/reportphishing
- Your phone carrier: Forward spam to 7726 (SPAM)
- State Attorney General: consumer protection division
Follow-Up Actions:
- Monitor credit reports for 12 months (AnnualCreditReport.com)
- Consider credit freeze if SSN was compromised
- Watch bank statements closely
- Change passwords on all important accounts
- Enable alerts for account activity
Key Takeaways
- ✅ 174% surge in delivery scams targets online shoppers
- ✅ Never click links in unexpected delivery notifications
- ✅ Always verify through official carrier apps and websites
- ✅ Real carriers never request payment via text message links
- ✅ Enroll in official tracking services for legitimate notifications
- ✅ Watch for red flags: Urgency, payment requests, shortened URLs
- ✅ Report scams to carriers and FTC to protect others
- ✅ Act immediately if you’ve shared payment or personal information
Remember: When in doubt, go directly to the carrier’s official website or app. Never click links in unsolicited delivery notifications. Legitimate packages can wait a few minutes for you to verify their authenticity safely.