The Missed Package Text Scam: How to Spot It Before You Lose Money

You’re expecting a package. Maybe it’s a birthday gift for your granddaughter, a new tool set, or a prescription refill. Then your phone buzzes with a text message: “USPS: Your package has a delivery problem. Click here to reschedule.” The link looks official. The logo seems right. But if you tap that link, you’re not resolving a delivery issue—you’re handing over your personal information, and possibly your bank account, to criminals.

This is the missed package text scam, also called “smishing” when it comes via SMS. It’s one of the most common and effective online cons hitting Americans today. And it targets people like you, busy adults in their 40s, 50s, and 60s who order things online and trust official-looking messages. The scammers know that a missed delivery creates urgency. You want your item. You don’t want it lost. That anxiety makes you act fast without thinking.

Here’s how it plays out. You receive a text that appears to come from a major carrier—USPS, UPS, FedEx, or even Amazon. The message says something like “Your package was delayed” or “We couldn’t deliver your item—schedule a new delivery time” or “Your package is held at the depot—confirm your address.” It includes a link. That link takes you to a fake login page that looks exactly like the real carrier’s website. You’re asked to enter your name, email, phone number, and often your credit card number to “pay a small redelivery fee” of a dollar or two. That fee is the hook. Once you enter your card details, the scammers drain your account or sell your information on the dark web.

The fake site may also request your Social Security number or driver’s license under the guise of “identity verification.” No legitimate shipping company ever asks for that. But the page is designed to look real—same colors, same fonts, even a fake security padlock icon. If you’re not paying close attention, it’s easy to fall for.

These scams surge during the holiday shopping season, but they happen year-round. The scammers don’t need to know what you ordered. They blast these texts to thousands of random phone numbers, knowing that a certain percentage of people are expecting a package at any given time. If you happen to be waiting for something, the message feels tailor-made for you.

How do you spot the trick? First, check the sender’s phone number. Legitimate delivery alerts come from short codes or official numbers like 28777 for USPS. If the text comes from a random 10-digit number, especially one with an area code you don’t recognize, that’s a red flag. Second, look at the link closely. Before you tap, hover over it (on a computer) or press and hold on your phone to see the full URL. Real carriers use addresses like usps.com or fedex.com. Scammers use addresses like usps-delivery-tracking.xyz or track-fedex.top. Any slight variation—a misspelling, an extra hyphen, a strange domain ending like .top, .info, or .click—is a sign of fraud.

Third, consider the message’s tone. Official delivery updates are usually short and include a tracking number. They never say “urgent” or “act now” or threaten that your package will be returned unless you pay immediately. That pressure is a scammer’s favorite tool. Fourth, never click a link in an unsolicited text. If you’re expecting a package, open your browser and go directly to the carrier’s website, or use their official app. Type in your tracking number yourself. That’s the only safe way to check.

What if you already clicked the link? Don’t panic, but act fast. If you entered any financial information, contact your bank or credit card company immediately to freeze the card and dispute any unauthorized charges. Change the password on your carrier account and any other account where you use the same password. Run a virus scan on your phone, especially if you downloaded anything from the fake site. Then report the scam to the Federal Trade Commission at ReportFraud.ftc.gov and to the carrier’s fraud department. You should also forward the suspicious text to 7726 (SPAM) so your mobile carrier can block the number.

The best protection is a healthy dose of skepticism. These scams succeed because they prey on your trust and your desire to get what you ordered. But no legitimate company will ever demand payment or sensitive information through a text message link. If a delivery issue is real, you can always call the carrier yourself. That extra minute of caution is all it takes to keep your money and your identity safe.

Remember: if the text feels off, it probably is. Delete it. Block the sender. And go about your day knowing you didn’t take the bait.