Photo Holding Package Extortion Messages

If you’ve been waiting for a package this holiday season—or any week of the year—your phone might buzz with a text that looks like a routine shipping update. Maybe it says “We need to confirm your address to release your delivery” or “Your package is being held at the hub. Click here to reschedule.” Attached is a photo of what appears to be your own front door, or a generic parcel with your name and street number. This is no routine alert. This is a Photo Holding Package Extortion Message, and it is one of the most insidious delivery confirmation scams targeting middle-class Americans right now.

Here’s how it works. Scammers obtain your name, address, and phone number—often from data breaches, public records, or hacked e-commerce accounts. They then generate a text message that includes a real or fake photo of a package sitting outside a door that looks plausibly like yours. The message claims the courier cannot complete delivery until you verify your identity by clicking a link or replying with personal details. In some variants, the text threatens that if you do not act within 24 hours, the package will be returned to sender or destroyed. The implied urgency is designed to bypass your skepticism.

But the real danger goes beyond a simple phishing link. In recent months, scammers have layered extortion into these messages. After you click the link, you may be taken to a page that asks for your credit card number to pay a “small redelivery fee” of $1.99 to $4.99. This is a classic low-dollar scrape—they steal your card details, then drain your account or sell the number on the dark web. Worse, some messages now include the line “We have your photo and address. Confirm delivery or we will report you to the police for package theft.” This is pure extortion. The scammer wants you to believe they have evidence of you accepting a package you never ordered, and that legal action will follow unless you pay a “fine” via gift cards or cryptocurrency.

Why is this scam so effective with Americans aged 45 to 64? Because this age group relies heavily on e-commerce for everything from groceries to prescription refills. You have multiple deliveries scheduled each week, and you are used to getting real shipping updates from Amazon, UPS, FedEx, and USPS. A message that shows a picture of a package—even a generic one—triggers a mental match: “Oh, I am expecting a new phone charger from Amazon. That must be it.” The photo adds a veneer of authenticity that a plain text link lacks. Scammers know that middle-class families are tired of missed deliveries and porch theft, so the message “Your package is being held for your safety” taps into a real frustration.

The extortion twist is particularly dangerous. If the message says “We have your address and photo,” your mind immediately goes to home security. You worry that someone knows where you live and what you look like. Scammers exploit this fear to push you into irrational compliance. They count on you not stopping to think: legitimate delivery companies never demand payment via a text link, they never threaten legal action for a missed package, and they never hold a photo of your home for ransom. Real couriers either leave a notice on your door or reroute the package automatically.

What should you do if you receive one of these messages? First, do not click any link. Do not reply, even to say “Stop” or “Wrong number.” Replying confirms your number is active and invites more scam attempts. Instead, look up the official tracking number from the seller or check your account on the carrier’s legitimate website or app. If you see no pending delivery with that carrier, delete the message and block the sender. If you clicked the link, immediately contact your bank or credit card issuer to freeze your card and request a replacement. File a report with the Federal Trade Commission at ReportFraud.ftc.gov and with your state attorney general’s office.

Prevention is simpler than reaction. Enable two-factor authentication on your email and shopping accounts to reduce the chance of scammers harvesting your address. Use a separate email alias for online purchases so that if one retailer is breached, the scammer cannot connect that alias to your real name and phone number. Finally, remind yourself that any text demanding immediate payment or threatening penalties for a package you never ordered is a lie. No photo of a porch is worth your banking details.

The Photo Holding Package Extortion Message is a hybrid of delivery notification cons and old-fashioned extortion. It preys on the convenience of online shopping and the anxiety of missing a package. But by pausing, verifying, and ignoring the urgency, you can keep your money and your identity safe.