Back to Awareness Hub
Threat Intelligence

How to Spot Fake Delivery Text Messages

Mar 10, 20264 min read
Delivery package

"Your package could not be delivered due to an incomplete address. Please update your details here: [malicious link]." If you've received a text message like this, you are not alone. Fake delivery notifications are currently one of the most prevalent forms of smishing (SMS phishing) worldwide.

Why Are They So Common?

The success of this scam relies on a simple numbers game. With the massive increase in online shopping, at any given moment, a large percentage of the population is genuinely expecting a package. Scammers send out millions of these texts indiscriminately, knowing that many recipients will assume the message is about their actual order.

Red Flags to Watch Out For

While these messages can look convincing, often spoofing the names of major carriers like USPS, FedEx, UPS, or Australia Post, there are usually telltale signs that they are fake:

  • Generic Greetings: Legitimate delivery services usually don't use generic greetings like "Dear Customer." They often use your name or reference a specific tracking number.
  • Urgency: Scammers create a false sense of urgency, claiming your package will be returned to the sender or destroyed if you don't act immediately.
  • Suspicious Links: This is the biggest giveaway. Look closely at the URL. It might look similar to a real carrier's website (e.g., `usps-tracking-update.com` instead of `usps.com`), but it's a fake domain designed to steal your information.
  • Requests for Payment: You should never have to pay a "redelivery fee" or "customs charge" via a link in an unsolicited text message.
  • Requests for Personal Info: The link will often lead to a form asking for your name, address, date of birth, and credit card details.

What Happens If You Click?

Clicking the link usually takes you to a highly realistic, spoofed website. If you enter your information, the scammers capture it immediately. They can use this data to commit identity theft, make unauthorized purchases, or sell your information on the dark web. In some cases, simply clicking the link can download malware onto your device.

What to Do Instead

If you receive a suspicious delivery text:

  1. Do not click the link.
  2. Do not reply to the message. Replying confirms your number is active.
  3. Check the official source. If you are expecting a package, go directly to the retailer's website or the official carrier's app/website and enter your tracking number there.
  4. Use ScamCheck Pro. If you're unsure, copy the text or take a screenshot and run it through the ScamCheck Pro app. Our AI engine will instantly analyze the link and the language to determine if it's a threat.

Scan Before You Click

ScamCheck Pro is specifically designed to catch these types of smishing attacks. By analyzing the URL structure and the psychological triggers in the text, we can warn you before you make a costly mistake.