The Fake Package Delivery Text: How a Simple Notification Can Empty Your Bank Account

You check your phone during a commercial break and see a text message: “USPS: Your package is held at our facility due to incomplete address. Please confirm your details at [shortened link] to reschedule delivery.” You were expecting a package—the new blender from your daughter, or those shoes you ordered last week. Without thinking, you tap the link. The page looks official, asks for your name, address, and a “small redelivery fee” of $1.99. You enter your credit card number. That’s when the trouble starts.

This is a package delivery phishing scam, and it has become one of the most effective traps for people in your age group. Scammers know that middle-class Americans aged 45 to 64 are busy, often handle household deliveries, and tend to trust automated notifications from carriers like USPS, FedEx, UPS, and Amazon. They also know that you are less likely to question a text about a package you’re actually expecting. That little bit of uncertainty is all they need.

The scam works in two stages. First, the text message arrives out of the blue. It may mention a generic “shipment” or even use a fake tracking number. The link leads to a page that mimics the real carrier’s website—same logo, same font, same colors. You are asked to verify your identity or pay a small fee. If you enter your credit card information, the scammers immediately steal it. But they don’t stop there. Many of these fake sites also ask for your Social Security number, date of birth, or bank account details under the guise of “identity verification for delivery.” Once they have that, they can open new accounts, take out loans, or drain your checking account.

The second stage is even more insidious. After you enter your information, you might receive a follow-up call from someone claiming to be a “security specialist” from the carrier or your bank. They say they’ve detected suspicious activity and need you to confirm a few things—or worse, they ask you to install remote access software to “help fix the problem.” That software gives them full control of your computer, allowing them to see your passwords, bank statements, and even take over your online banking session while you watch. This is called a dual scam: first the phishing text, then the tech-support follow-up.

Why do these scams succeed so often with people in their fifties and sixties? Because you grew up in an era when a phone call or a handwritten letter was the norm. You learned to trust official-looking communications. Scammers exploit that trust. They also exploit the fact that you likely use online shopping regularly—according to recent surveys, over 70% of adults aged 45–64 have made an online purchase in the past month. Scammers cast a wide net, sending millions of texts a day. They don’t need everyone to fall for it. They just need a few hundred people with a moment of distraction.

Spotting a fake package delivery text is not hard once you know what to look for. First, check the sender’s number. Legitimate carriers use short codes like “USPS” or “FedEx” that appear as a name in your contacts, not a random 10-digit number or an international prefix. Second, the message itself will have red flags: typos, odd capitalization, or generic greetings like “Dear customer” instead of your name. Third, the link will be suspicious. Hover over it (on a computer) or long-press it (on a phone) to see the actual web address. Real carrier links end with something like usps.com or fedex.com. Scam links often use misspellings like usps-delivery.com or fedex-tracking.xyz. Never tap a link in an unsolicited text.

If you receive such a message, do not reply. Do not click. Instead, go directly to the carrier’s official website or app and check your tracking status using the real tracking number you were given at the time of purchase. If you have no package expected, simply delete the message and block the sender. If you have already clicked the link and entered information, act fast. Contact your bank or credit card company immediately to freeze the account and dispute any unauthorized charges. Place a fraud alert on your credit reports with the three major bureaus—Equifax, Experian, and TransUnion. Change the passwords for any accounts you use online, especially your email and banking. And if you installed any remote access software, disconnect from the internet, run a full antivirus scan, and then reset all your passwords from a clean device.

Package delivery scams are not going away. They evolve with the seasons—more texts during the holiday shopping rush, more during Amazon Prime Day, more when you’ve just moved and are expecting new furniture. The scammers study your habits. Your best defense is a simple rule: never trust an unsolicited text that asks you to click a link and enter personal information. If you did not initiate the contact, treat it as guilty until proven innocent. A real delivery problem will show up in the tracking updates you can check yourself. A fake one will only steal your time and your money.