The Missed Delivery Scam: How Fake Package Notices Are Stealing From You

You hear the ding of your phone, see a text or email from what looks like the U.S. Postal Service, FedEx, UPS, or Amazon. The message says a package couldn’t be delivered because of an incomplete address, unpaid postage, or a missed delivery attempt. It gives you a link to click to reschedule, update your address, or pay a small redelivery fee. That link is the trap.

This is the missed package scam, one of the most widespread and effective online cons targeting Americans right now. It preys on our daily habit of ordering online, especially during holiday rushes or after a big sale. You click the link thinking you’ll fix a minor problem, and instead you hand over your credit card number, your address, your phone number, or even your Social Security number. Or you install malware on your device that waits for your next banking session.

The scam works because it looks legitimate. Scammers copy official logos, use real-looking tracking numbers, and send messages that match the tone of real delivery alerts. They often spoof the sender name so the message appears to come from “USPS” or “FedEx” in your phone’s contact list. And they create fake websites that look exactly like the real carrier’s site, down to the shipping calculator and customer service chat box.

How can you spot the fake? Start with the link. Legitimate delivery notifications from USPS, UPS, FedEx, and Amazon always use their official domain: usps.com, fedex.com, ups.com, or amazon.com. Scam links use misspellings like usps-delivery.com, track-my-parcel.net, or something with a random string of numbers. Hover your finger over the link on a phone or computer — do not tap or click it — and look at the actual URL. If it doesn’t end in the company’s real domain, it’s a fraud.

Next, look at the message itself. Real delivery companies rarely send text messages unless you specifically signed up for tracking alerts. Most delivery notices come via email, and even then, they never ask you to pay a fee online to release a package. If you missed a delivery, the carrier leaves a physical door tag with a notice number. You can then go to their official site and enter that number. No legitimate company demands immediate payment through a text message link.

The fee itself is another red flag. Scammers often charge $0.50 to $3.00, calling it a “redelivery fee” or “address correction fee.” That tiny amount is meant to seem trivial so you don’t think twice. But once you enter your credit card info, the scammer either runs up charges immediately or sells your card number on the dark web. Some scammers use the same form to ask for your date of birth and Social Security number under the pretense of “identity verification,” which opens the door to full-blown identity theft.

Another variation of the missed package scam involves a voicemail. You get a call from a number that looks like a local area code. The recorded voice says you have a package waiting and to press 1 to speak to a customer service agent. The agent then asks for your address and a “small processing fee.” If you pay, you get nothing. If you provide personal details, you get a stolen identity.

Older Americans, especially those aged 45 to 64, are frequent targets because they tend to order more household goods online than younger consumers and are often less familiar with text-based phishing tactics. The Federal Trade Commission reported that delivery-related scams surged over 300% in recent years, with losses totaling hundreds of millions of dollars. Many victims don’t realize they’ve been scammed until they see unauthorized charges weeks later.

What should you do if you get a suspicious delivery notice? First, do not click anything. If you think the message might be real, go directly to the carrier’s website on your own — type the address yourself — and check for tracking updates using the original order number. If you have an account with the carrier, log in there to see if any notifications are legitimate. Most real delivery services will also let you manage delivery preferences through your account without clicking any link in an unsolicited email or text.

If you already clicked the link and entered information, act fast. Contact your bank or credit card company immediately to stop payment and freeze the card. Change the passwords on any accounts you use online, especially email and shopping accounts. If you gave out your Social Security number, place a fraud alert on your credit report by contacting one of the three major credit bureaus. Report the scam to the FTC at ReportFraud.ftc.gov and to the carrier’s real fraud department.

The missed package scam works because it preys on a simple, everyday inconvenience — a package that didn’t arrive. But the con is anything but simple. It is a carefully designed piece of social engineering that exploits your trust in a familiar process. Recognizing it is the only defense. If you receive an unexpected delivery notice that demands action and includes a link, slow down. Legitimate companies do not rush you into clicking. Scammers do.