I almost clicked one of these texts because I actually was waiting for a package.
It arrived around 9:20 in the morning. The message said there was a problem with my delivery and that I needed to confirm my address. There was a tracking number, a delivery-company name, and a link underneath it.
For about five seconds, it looked completely reasonable.
Then I remembered I had ordered something two days earlier, but the tracking information was already available in the retailer's app. I opened the app instead. The package was moving normally.
That was the part that bothered me. The scam didn't need to convince me that I was expecting a package. It only needed to arrive at the right moment.
That's why these messages work so well.
Step 1: The Text Arrives
The scam usually begins with a short message pretending to come from a delivery company or postal service.
The wording varies, but common stories include:
Your package couldn't be delivered.
Your shipping address needs to be confirmed.
Your package is being held.
You need to pay a small redelivery or delivery fee.
Your delivery preferences need to be updated.
The FTC has specifically warned about texts impersonating USPS, FedEx, UPS, and other familiar companies. In many cases, the message contains a link that leads to a fake website.
Step 2: The Message Creates a Small Problem
This is the clever part.
The scam usually doesn't start by asking for your credit card number. Instead, it creates a tiny problem that sounds easy to fix.
"Confirm your address."
"Update delivery preferences."
"Pay $1.99 to reschedule delivery."
"Verify your information."
None of those requests sounds as serious as "give me your banking information."
That's intentional.
The FTC says scammers use fake package problems because the situation feels familiar and urgent. They also use the names and branding of real organizations to make the message look legitimate.
Step 3: The Link Is the Real Trap
The text wants you to click.
That's the important part to understand.
The package story is just the reason you're given for opening the link.
Once you click, you may land on a page designed to look like the website of USPS, UPS, FedEx, or another delivery company. The logo may look right. The colors may look right. There may even be a fake tracking number already displayed on the page.
But you're not necessarily dealing with the real company.
The FTC has documented package-delivery scams where the fake site asks for personal or financial information, sometimes while pretending to collect a small redelivery fee.
Step 4: They Ask for Information
This is where the scam becomes expensive.
The fake page might ask for your name, address, phone number, email address, or other personal details.
Then it may ask for payment information.
The amount can be surprisingly small.
That's part of the trick.
A request for $1 or $2 doesn't feel like something worth worrying about. But the payment page can be designed to collect the card number, expiration date, security code, and billing information.
The FTC has warned that scammers can use those details for unauthorized charges after obtaining the card information through these fake delivery sites.
Step 5: The "Small Fee" Is Not Really the Point
If the message says you only need to pay a tiny amount to get your package delivered, don't assume the risk is limited to that amount.
The payment itself may be the mechanism for collecting your card details.
And once those details are in the hands of a scammer, the original $1 or $2 is no longer the main concern.
This is why the FTC specifically warns consumers not to pay unexpected redelivery fees through links in unsolicited messages.
Step 6: Some Scams Go After More Than Your Card
Not every package scam is focused only on payment information.
A fake delivery page can also be designed to collect personal information that could later be used for identity theft or additional phishing attempts.
That's why I don't treat these messages as harmless spam anymore.
If an unexpected text gets me to a page asking for personal information, I close it.
The Biggest Warning Signs
You don't need to identify every technical detail of a scam. A few simple checks can eliminate most of these messages.
1. You weren't expecting the message.
If you aren't waiting for a package, that's an obvious warning sign. But don't stop there. Even if you are expecting something, the message can still be fake.
2. It tells you to click a link.
This is one of the biggest red flags. The FTC recommends avoiding links in unexpected texts and checking the situation independently instead.
3. There's an urgent problem.
"Your package will be returned."
"Confirm immediately."
"Delivery failed."
Urgency is there to make you react before you think.
4. It asks for payment.
A surprise request for a redelivery or shipping fee deserves extra suspicion, especially when it comes through an unsolicited text.
5. The website address looks strange.
Don't judge a site by its logo. Look at the actual web address.
A convincing design doesn't prove that you're dealing with the real company.
What I Do Instead of Clicking
If I get a delivery text now, I don't use the message to investigate the package.
I open the retailer's website or app myself.
Then I check the order.
If the package was shipped through USPS, UPS, FedEx, or another carrier, I go directly to that carrier's official website or app and enter the tracking information there.
That's a much better habit than trusting a link somebody just sent to my phone.
The FTC recommends this exact approach: verify delivery information independently instead of clicking the link in the unexpected message.
What If You Already Clicked?
Clicking the link doesn't automatically mean you've been hacked or lost money.
What matters is what happened afterward.
If you clicked but immediately closed the page without entering information, don't panic. Stop interacting with the message and don't go back to the site.
If you entered a password, change that password through the real service's website or app. If you reused the same password somewhere else, change it there too.
If you entered credit or debit card information, contact the card issuer using the phone number on the back of the card and explain what happened. Watch the account for unauthorized transactions.
If you gave away sensitive personal information, take additional steps based on exactly what you shared. The FTC's recovery guidance covers what to do after giving scammers personal information or money.
How to Report the Text
Don't just delete the message and forget about it.
Most phones have an option to report a message as junk or spam.
In the U.S., you can also forward unwanted text messages to 7726, which spells "SPAM." The FTC also recommends reporting scams through its fraud-reporting system.
USPS also specifically warns consumers about package-delivery smishing messages and says suspicious USPS-related texts should not be clicked.
The Rule I Use Now
I've stopped trying to determine whether a package text "looks real."
That's the wrong test.
My test is much simpler: Did I independently verify the delivery through the retailer or carrier's official app or website?
If I haven't, I don't click the link.
That one habit removes most of the pressure from the situation. I don't have to figure out whether the logo is genuine, whether the tracking number looks convincing, or whether the wording sounds professional.
I just ignore the link and check the package myself.
Because the most dangerous part of the package-delivery scam isn't the fake package.
It's the few seconds between receiving the text and deciding to trust it.
More scam-prevention and everyday tech tips like this are up on Tech & Rewards.