Delivery and Shipping Scams: How to Spot Fake UPS, FedEx, and USPS Messages (2026 Guide)
You get a text message: "Your package could not be delivered. Click here to reschedule." It looks official, maybe from UPS or USPS. You were expecting a package, so you tap the link without thinking.
That single tap could cost you hundreds — or expose your identity to criminals.
Delivery and shipping scams are among the fastest-growing fraud types in the United States. The Federal Trade Commission reported that package delivery scams generated over $230 million in losses in 2025 alone, with text message-based delivery scams (smishing) increasing by 400% since 2021.
Scammers exploit a simple truth: most Americans receive packages regularly. With over 21 billion packages shipped in the U.S. annually, the odds of catching someone who is actually expecting a delivery are remarkably high.
This guide covers every type of delivery scam circulating in 2026, how to identify them instantly, and what to do if you have already clicked a suspicious link.
Why Delivery Scams Work So Well
Delivery scams succeed for several psychological reasons that make them uniquely effective:
Timing and probability. At any given moment, millions of Americans are waiting for a package. Scammers do not need to know you ordered something — they just send millions of messages and the math works in their favor.
Urgency and fear. Messages like "Your package will be returned to sender" or "Delivery failed — action required within 24 hours" create immediate pressure. People react before they think.
Brand trust. UPS, FedEx, and USPS are trusted institutions. When a message appears to come from these carriers, people let their guard down.
Mobile targeting. Most delivery notifications arrive on phones, where it is harder to inspect URLs, verify senders, and spot fakes compared to a desktop screen.
Low effort, high reward. Creating a fake delivery notification costs scammers virtually nothing. Even if only 1 in 10,000 people clicks, the campaign is profitable.
The 7 Most Common Delivery Scams in 2026
1. Fake "Failed Delivery" Text Messages (Smishing)
This is the most common delivery scam by far. You receive a text message claiming a delivery attempt failed and asking you to click a link to reschedule.
What the scam looks like:
USPS: We attempted to deliver your package but no one was available. Schedule a new delivery: [suspicious-link.com/usps-track]
UPS Notification: Your package could not be delivered on 03/08/2026. Update your delivery preferences: [bit.ly/ups-xxxxx]
FedEx: Package #FX9847362 is being held at our facility. Confirm your address to release: [fedex-delivery.fake-domain.com]
How to spot it:
- Real carriers rarely text you unless you specifically signed up for text alerts
- The sender number is usually a random 10-digit number, not a short code
- Links go to domains that are NOT ups.com, fedex.com, or usps.com
- Grammar and spacing issues are common
- They never include your actual name or real tracking number
What actually happens if you click: You land on a convincing-looking page that asks for your address, phone number, and often a credit card number (for a small "redelivery fee" of $1-3). This small charge is a test — once they confirm your card works, larger charges follow. Your personal information is also sold to other scammers.
2. Fake Delivery Fee or Customs Charge Scams
Scammers send emails or texts claiming your package requires an additional fee before it can be delivered — a customs charge, a redelivery fee, or an address correction fee.
What the scam looks like:
Subject: Action Required: Customs fee due on your international shipment
Dear Customer, Your package from overseas has arrived at our facility. A customs processing fee of $3.99 is required before we can complete delivery. Pay now to avoid your package being returned to sender.
Reality check:
- USPS, UPS, and FedEx handle customs charges at the time of delivery or bill the shipper directly
- They will never email you a payment link for customs fees
- The small dollar amount ($1.99, $3.99) is designed to seem insignificant — but your payment information is the real target
- Legitimate customs charges are documented with official paperwork, not random emails
3. Fake Tracking Number Emails
You receive an email with a "tracking number" for a package you never ordered. The email includes a link to "track your shipment" or an attachment with "shipping details."
What the scam looks like:
From: shipping-notification@ups-tracking-center.com Subject: Your UPS Shipment UPS1Z9999999999999999 Is On Its Way!
Track your package: [malicious link] Or see attached shipping label for details.
The danger:
- Clicking the tracking link leads to a phishing site or triggers a malware download
- Opening the attachment can install ransomware, keyloggers, or trojans
- The sender address looks similar to official domains but uses misspellings or added words (ups-tracking-center.com instead of ups.com)
How to verify:
- Go directly to ups.com, fedex.com, or usps.com and enter the tracking number manually
- If you did not order anything, ignore the message entirely
- Never open attachments from unexpected shipping emails
4. Package Theft Notification Scams
A newer variant where scammers send emails claiming your package was stolen or tampered with, and ask you to file a claim by clicking a link.
What the scam looks like:
Subject: Alert: Your recent delivery may have been compromised
Our records indicate that your package delivered on [date] may have been intercepted. To file a theft report and receive a replacement, please verify your identity and order details: [phishing-link]
Why it works:
- Package theft is a real and growing problem, so the premise is believable
- The urgency of potentially losing a purchase motivates quick action
- The "verify your identity" step harvests sensitive personal information
The reality:
- Carriers do not proactively notify you about suspected package theft
- Theft claims are handled through the retailer you purchased from, not the carrier
- No legitimate claim process requires you to "verify your identity" through an email link
5. Fake "Confirm Your Address" Scams
These messages claim there is a problem with your delivery address and ask you to confirm or update it through a link.
What the scam looks like:
USPS: We were unable to verify your delivery address for package #US9876543210. Please confirm your address within 24 hours or your package will be returned: [phishing-link]
What they want: Your full name, street address, phone number, and often your date of birth — everything needed for identity theft. Some versions also ask for a "verification payment" of $0.99 to $2.99.
How to tell it is fake:
- If a carrier cannot deliver to your address, they leave a physical notice at your door or mailbox
- USPS will hold packages at your local post office — they do not send text links
- Your carrier already has your address from the shipping label
6. Fake Delivery Driver or "Missed Delivery" Phone Calls
You receive a phone call from someone claiming to be a delivery driver who needs additional information to complete your delivery.
What the scam sounds like:
"Hi, this is Mike from FedEx. I have a package for you but I need to verify your identity before I can leave it. Can you confirm your date of birth and the last four digits of your Social Security number?"
Red flags:
- Delivery drivers never ask for personal information beyond confirming your name
- No carrier requires Social Security numbers for package delivery
- If a driver cannot deliver, they leave a door tag — they do not call asking for identity verification
- The caller ID may show "FedEx" or "UPS" but caller ID is easily spoofed
7. Fake Delivery Notification App or Software Scams
You receive a message asking you to install an app or software to track your delivery, manage notifications, or "optimize your delivery preferences."
What the scam looks like:
FedEx: Download our new tracking app for real-time delivery updates and exclusive offers: [link to fake app download]
Your USPS delivery experience can be improved. Install our notification manager: [malicious download link]
The danger:
- The "app" is actually malware — spyware, a banking trojan, or ransomware
- Once installed, it can access your contacts, messages, banking apps, and photos
- Some fake apps request accessibility permissions that give them complete control of your phone
How to stay safe:
- Only download carrier apps from the official Apple App Store or Google Play Store
- Go directly to the app store and search for "UPS," "FedEx," or "USPS" — do not follow links
- Real carrier apps: UPS Mobile, FedEx Mobile, USPS Mobile (Informed Delivery)
How to Identify a Delivery Scam in 10 Seconds
Use this rapid checklist whenever you receive a delivery notification:
Step 1: Check the sender
- Text messages: Is it from a random phone number or a verified short code?
- Emails: Does the sender domain exactly match ups.com, fedex.com, or usps.com? Watch for look-alikes like ups-delivery.com or fedex-tracking.net
- If the sender looks wrong → it is a scam
Step 2: Check the link (without clicking)
- On mobile: long-press the link to preview the URL
- On desktop: hover over the link to see the destination
- If the URL is not ups.com, fedex.com, or usps.com → it is a scam
Step 3: Check for personal details
- Does the message use your actual name? Scammers usually say "Dear Customer" or nothing at all
- Does it include a real tracking number? You can verify any tracking number directly on the carrier's website
- If it is generic → it is a scam
Step 4: Check the ask
- Is it asking for payment? Real carriers do not request payment through text or email links
- Is it asking for personal information? Carriers already have your delivery info from the shipper
- If it asks for money or info → it is a scam
Step 5: Verify independently
- Go directly to ups.com, fedex.com, or usps.com (type the address yourself)
- Enter any tracking number from the message
- Check your order history on the retailer's website (Amazon, Walmart, etc.)
- If nothing matches → it is a scam
Carrier-Specific Scam Identification
UPS Scams: What to Look For
Legitimate UPS communications:
- Come from ups.com email addresses (not ups-notifications.com or similar)
- Use your name if you have a UPS My Choice account
- Include valid tracking numbers starting with 1Z
- Never ask for payment via email or text
- Text alerts only come from short code 48515 or 94601 (if you opted in)
Common UPS scam patterns:
- "UPS" emails from Gmail, Yahoo, or Outlook addresses
- Tracking numbers in formats UPS does not use
- Requests to pay for "premium delivery" or "insurance"
- Links to anything other than ups.com
Verify UPS deliveries: Go to ups.com/track and enter your tracking number.
FedEx Scams: What to Look For
Legitimate FedEx communications:
- Come from fedex.com email addresses
- Include your name and real tracking number
- FedEx Delivery Manager texts come from 37473 (FEDEX)
- Never ask for credit card information via email or text
Common FedEx scam patterns:
- Emails with subjects like "FedEx Shipment Exception" or "Delivery Failure"
- Links to fedex-tracking.com, myfedex.net, or other fake domains
- Attachments claiming to be "shipping labels" or "invoices" (often malware)
- Requests to pay "fuel surcharges" or "handling fees"
Verify FedEx deliveries: Go to fedex.com/tracking and enter your tracking number.
USPS Scams: What to Look For
Legitimate USPS communications:
- Emails come from usps.com addresses
- USPS Informed Delivery sends from informeddelivery@usps.com
- Text alerts come from 28777 (if you opted in via Informed Delivery)
- USPS will never ask for payment to release a package
Common USPS scam patterns:
- Texts from random phone numbers claiming to be USPS
- Emails about "USPS Express Delivery" (not a real USPS service name)
- Requests to pay customs fees, redelivery charges, or address verification fees
- Messages with "USPS" in the sender name but non-USPS email addresses
Verify USPS deliveries: Go to tools.usps.com/go/TrackConfirmAction_input and enter your tracking number.
What to Do If You Already Clicked a Scam Link
If you have already clicked a suspicious delivery link, take these steps immediately:
If you only clicked the link (did not enter information):
- Close the browser tab immediately
- Clear your browser history and cache
- Run a virus scan on your device
- Monitor your accounts for unusual activity for the next 30 days
If you entered personal information:
- Change passwords immediately — especially for email, banking, and shopping accounts
- Enable two-factor authentication on all important accounts
- Contact your bank if you entered payment information — freeze your card and request a new one
- Place a fraud alert on your credit reports (contact Equifax, Experian, or TransUnion)
- Consider a credit freeze if you shared your Social Security number
- File a report with the FTC at reportfraud.ftc.gov
- Report the scam to the impersonated carrier:
- UPS: ups.com/fraud
- FedEx: fedex.com/en-us/report-fraud.html
- USPS: Email spam@uspis.gov or call 1-877-876-2455
If you installed an app or software:
- Disconnect from the internet immediately (turn off WiFi and mobile data)
- Do not enter any passwords or open any banking apps
- Uninstall the suspicious app (Settings → Apps → find and uninstall)
- Run a full security scan using a trusted antivirus app
- Change all passwords from a DIFFERENT device
- Factory reset your phone if you cannot fully remove the malware
- Contact your bank to alert them of potential compromise
How to Protect Yourself from Delivery Scams
1. Sign up for official carrier tracking
- USPS Informed Delivery: Free service that shows you images of incoming mail and package tracking — sign up at informeddelivery.usps.com
- UPS My Choice: Free account for delivery alerts and management at ups.com
- FedEx Delivery Manager: Free tracking and delivery control at fedex.com
When you use official tracking services, you always know what is coming and when. Any notification that does not match your real tracking information is immediately suspicious.
2. Never click links in delivery texts or emails
Always go directly to the carrier's website by typing the URL into your browser. If a message includes a tracking number, copy it and paste it into the carrier's official tracking page.
3. Use the retailer for tracking
When you buy something online, the retailer (Amazon, Walmart, Target, etc.) provides tracking in your account. Check your order status there first — it is the most reliable source.
4. Report suspicious messages
- Forward suspicious texts to 7726 (SPAM) — this alerts your carrier
- Forward phishing emails to spam@uce.gov (FTC)
- Report to the impersonated company using their fraud reporting pages
5. Keep your devices updated
Software updates include security patches that protect against the malware delivery scams try to install. Enable automatic updates on your phone and computer.
6. Use a scam detection tool
When in doubt, paste the suspicious message into a free scam detection tool. Our AI Scam Checker analyzes text messages, emails, and notifications instantly to tell you if they are legitimate or fraudulent — no signup required.
Delivery Scam Red Flags: Quick Reference
| Red Flag | What It Means |
|---|---|
| Random phone number sender | Not from an official carrier short code |
| "Dear Customer" (no name) | Mass-sent, not personalized |
| Asks for payment | Carriers do not collect fees via text/email links |
| Asks for personal info | Carriers already have delivery details |
| Urgent deadline ("24 hours") | Pressure tactic to prevent thinking |
| Suspicious URL | Domain is not ups.com, fedex.com, or usps.com |
| You did not order anything | Obvious but often overlooked |
| Attachment included | Potential malware — never open |
| Asks to install an app | Legitimate apps are only on official app stores |
| Too-small fee ($0.99-$3.99) | Card testing — small charge, then big ones follow |
The Bottom Line
Delivery scams work because they exploit routine behavior. You expect packages, so a delivery notification feels normal. Scammers know this and send millions of fake messages hoping to catch you at the right moment.
The defense is simple: never click links in delivery notifications. Always go directly to the carrier's website or use the retailer's tracking. If a message asks for payment or personal information, it is a scam — no exceptions.
When in doubt, paste any suspicious delivery notification into our free AI Scam Checker for instant analysis. It takes seconds and could save you from identity theft or financial loss.
Stay vigilant. Stay safe.