The Fake Package Delivery Text: How the “Missed Delivery” Phish Works

You check your phone during a commercial break and see a text message. It says USPS, FedEx, or UPS. There is a package for you, but they could not deliver it because your address is incomplete. The message looks official. It has a tracking number that looks real. It asks you to click a link to reschedule delivery or pay a small redelivery fee, usually 1.99 or 2.99. You were not expecting a package, but maybe your spouse ordered something. Maybe it is a gift from a relative. You click the link. That is where the trouble starts.

This is the fake package delivery text, and it is one of the most common phishing scams hitting American phones right now. The people behind it are counting on three things: the chaos of the holiday season, your habit of trusting familiar company names, and your natural desire to avoid missing something important. They are also counting on the fact that these texts arrive at any time of day or night, often hitting your phone when you are distracted, tired, or multitasking. By the time you realize what happened, your personal information is already in their hands.

The mechanics of this scam are deceptively simple. The text message arrives from a phone number that appears to be a legitimate short code or a standard ten-digit number. The message includes a URL that looks like it belongs to the shipping company. A typical example might read “USPS: Your package could not be delivered due to incomplete address information. Please update your delivery preferences at usps-delivery[dot]com.” That domain is a clever forgery. The real USPS website is usps.com. The scam domain adds a hyphen or an extra word to fool you during a quick glance.

If you click the link, you land on a webpage that mimics the real carrier website down to the color scheme, the logo placement, and the font choices. There is a form asking for your full name, street address, phone number, and email address. It may also ask for your credit card number to cover the supposed redelivery fee. Some versions ask for your driver’s license number or your Social Security number under the guise of identity verification. None of this information is needed to reschedule a package delivery. No legitimate shipping company will ever text you out of the blue and ask you for your credit card or Social Security number. The entire page is a data collection tool built by criminals.

What happens after you fill out the form depends on the scammer’s goal. If you gave them your credit card number, they will immediately use it to make small test purchases. If those go through, they sell the card number on the dark web or run larger charges. If you gave them your address and personal details, they add your information to a database used for identity theft. They may open credit cards in your name, file fraudulent tax returns, or take out loans. They may also sell your information to other scam rings. One click on a fake link can set off a chain of financial damage that takes months to clean up.

This scam has evolved over the past few years. Earlier versions were easy to spot because the text came from a foreign country code or had obvious spelling errors. Criminals have gotten better. They now spoof legitimate short codes used by shipping companies. They use professional language. They include real tracking numbers that were randomly generated. They even set up fake customer service phone numbers that connect to call centers staffed by their own agents. If you call that number to verify the text, a friendly voice will confirm the story and push you to complete the process. This gives the scam an air of legitimacy that even cautious people find hard to resist.

You can protect yourself by following one simple rule. Never click a link in an unsolicited text message. If a message claims to be from a shipping company, do not click anything. Instead, go directly to the company’s official website by typing the address into your browser yourself. Log into your account there. Any legitimate delivery notification will appear in your account dashboard. You can also call the company’s official customer service number, which you find on their website or your billing statement, not the number in the text message. If the text is real, they will confirm it. If it is a scam, you have just saved yourself a world of trouble.

Another layer of defense is to slow down. Scammers pressure you to act quickly. Your text message may say that the package will be returned to sender in twenty-four hours. That urgency is a lie. Real shipping companies give you weeks to reschedule a delivery. If a message demands immediate action, that is a red flag. Take a breath. Check with the person who might have sent you a package. Look at your own recent orders. In almost every case, you will realize that nobody owes you a package, and the text was a setup from the start.

Tech tools can help. Most smartphones let you block text messages from unknown senders. You can also report these texts to the Federal Trade Commission at reportfraud.ftc.gov. Forward suspicious messages to 7726, which spells SPAM on a phone keypad. This helps carriers identify and block scam numbers. But the most important tool is still your own skepticism. When that text buzzes your phone late in the evening, and the offer of a mystery package feels exciting, remember that no delivery company will ever text you out of the blue to ask for your credit card. If it sounds like a trick, it is a trick. Treat every unexpected message as guilty until proven innocent.