Every Package Delivery Scam Text, Decoded: USPS, UPS, FedEx, DHL, and Amazon

Every Package Delivery Scam Text, Decoded: USPS, UPS, FedEx, DHL, and Amazon

Your phone buzzes. The text says your USPS package couldn't be delivered — something about an invalid address. Click here to reschedule.

Maybe you're actually waiting for something. Maybe you bought something online last week and already forgot what's in transit. The text lands right in that ambiguity, and that's exactly why it works.

Package delivery texts are the #1 most-reported text scam in the United States, according to FTC data released in April 2025. Americans lost $470 million to text scams in 2024 — delivery impersonation topped every other category. Here's what each version looks like and exactly how to tell real notifications from fakes.

How these scams work

The short version: scammers send texts pretending to be a carrier, create fake urgency — your package is on hold, your address is wrong, there's a small fee due — and then drive you to a clone site built to steal your card number or login credentials.

Here's why this works so consistently: Americans order online constantly. At any given moment, there's probably something in transit to your address. The scam doesn't need you to be expecting a specific package — it just needs the possibility to feel plausible. And it usually does.

Once you click and land on the fake site, the ask is typically something small. A redelivery fee. A couple of dollars to "confirm your address." A "customs processing" charge. Small enough not to set off alarm bells. Large enough to hand over real payment card details — which scammers then use for much bigger things.

What USPS scam texts actually say

The USPS Postal Inspection Service has documented the exact patterns. Representative examples of what these texts look like:

• "USPS: Your package could not be delivered due to an incorrect zip code. Please confirm your address:" [link]
• "Your USPS shipment is on hold. Update delivery preferences here:" [link]
• "USPS Notice: Unpaid postage on your package. Pay a small fee to release your delivery:" [link]
• "USPS Delivery Alert: Address insufficient for delivery. Action required within 24 hours."

The newest variant as of 2025–2026: tariff and customs-delay texts claiming your package is stuck because of new import rules and you need to pay a tariff fee to release it. U.S. consumers don't typically pay tariffs directly when receiving packages — that's handled between the carrier and the shipper — but the texts are landing right when people are genuinely confused about trade policy, which gives the cover story more surface area than it deserves.

The definitive tell: USPS will only text you if you specifically requested package tracking through their Informed Delivery or Track & Confirm service, for a specific tracking number. An unsolicited text about a problem with an unspecified package is not from USPS.

FedEx and UPS scam texts — same playbook, different logo

FedEx and UPS impersonation follow nearly identical scripts:

• "FedEx: We attempted delivery but no one was home. Click to reschedule:" [link]
• "UPS: Your shipment requires signature confirmation. Update delivery preferences:" [link]
• "FedEx: Your package is awaiting a small payment before delivery:" [link]

FedEx's official position is unambiguous: they don't request payment or personal information through unsolicited texts. Real FedEx tracking links go to fedex.com — not "fedex-tracking.net," not "fedex-delivery.com," not any hyphenated variation. Same rule applies to UPS: real messages link to ups.com only.

The dead giveaway with both carriers: if you received a text you didn't sign up for, about a package you can't verify against a specific order confirmation, it's fake. Both FedEx and UPS offer opt-in delivery alerts for specific tracked shipments. Outside of that specific opt-in, an unsolicited text isn't coming from them.

DHL and Amazon texts

DHL impersonation often targets people who've ordered internationally, since DHL is common for cross-border shipments. The scripts are nearly identical to FedEx and UPS versions, but they frequently add "customs clearance" language — your package is held at customs, you owe import duties, click here to pay. This is also where the tariff-confusion angle hits hardest.

Amazon is trickier, because Amazon genuinely sends a lot of notifications and people expect them. Scam texts impersonating Amazon typically claim there's a payment problem with your account, your shipment can't go out without updated billing info, or a delivery failed and requires action. The difference: real Amazon communications link to amazon.com — not "amazon-delivery.net" or any variation — and Amazon doesn't collect payment by asking you to tap a link in a random text.

We covered the Amazon product recall text variant separately — that one uses a realistic-looking order number to build credibility before asking you to verify your account.

The red flags hiding in plain sight

Forget the logos. Look at the mechanics, and every version of this scam shares the same tells:

1. You didn't opt in for alerts on this package. This is the first and clearest signal. Real carrier notifications require you to initiate tracking for a specific shipment.

2. The link doesn't go to the carrier's official domain. Real links go to usps.com, fedex.com, ups.com, dhl.com, or amazon.com. Fakes use lookalikes: "usps-notify.com," "fedex-tracking.net," "package-ups.com." Before clicking anything, look hard at where the link actually leads.

3. You're asked to pay a fee. USPS, FedEx, and UPS don't collect redelivery fees through text links. An ask for any payment to "release" your package is the scam revealing itself.

4. It's urgent. "Respond within 24 hours or your package will be returned to sender." Urgency is the oldest manipulation tactic going. Real carriers hold packages significantly longer than a day before returning them.

5. No specific tracking number. Real delivery alerts tie to a tracking number you can verify independently. Scam texts use vague language: "your recent shipment," "your package," "an incoming delivery."

6. It asks for your Social Security number, date of birth, or account login. No carrier needs any of this to redeliver a package. Zero exceptions, no matter how official the text looks.

If you want to check whether a link in a delivery text is safe before you click, paste it into Cautellus — the scanner checks against 770,000+ confirmed malicious domains and flags lookalike carrier sites immediately.

If this already happened to you

Don't panic, but move quickly.

If you clicked the link but didn't enter anything: you're likely okay. Close the tab, clear your browser cache, and don't return. Check your phone's recent permissions to see if anything was granted to the site.

If you entered your credit or debit card number: call your bank or card issuer right now. Report the card as potentially compromised. They can flag it, reverse recent fraudulent charges, and issue a replacement. Read our full what to do after clicking a scam link guide for the complete step-by-step.

If you paid through Zelle, Venmo, or another instant payment platform: your options are limited but not zero. Our payment scam recovery guide covers what's actually available.

If you entered login credentials for a carrier account or email address: change that password immediately everywhere you've used it. Turn on two-factor authentication if it's not already active.

How to actually check a real delivery problem

When you genuinely think there's a delivery issue, here's the only safe way to check:

1. Type the carrier's URL directly into your browser — usps.com, fedex.com, ups.com, dhl.com.
2. Enter the tracking number from your original order confirmation — not any number provided in the text.
3. If you don't have a tracking number, check your email receipt or the retailer's website directly.

Don't click a link in an unexpected text to track a package. It takes about 20 extra seconds to type the URL yourself, and it's the only way you actually know you're on the real site.

To report scam delivery texts:

• USPS impersonation: forward to spam@uspis.gov or text the message to 7726
• FedEx impersonation: forward to abuse@fedex.com
• UPS impersonation: forward to fraud@ups.com
• DHL impersonation: forward to phishing@dhl.com
• All text scams: report at ReportFraud.ftc.gov

Scammers are getting better at this. The carrier logos are sharper, the sites load faster, and the dollar amounts they ask for are small enough to feel like a minor inconvenience rather than a theft. Don't let the low stakes fool you — the card details you hand over for a fake $2 redelivery fee are the same ones they use for everything else.

FAQs

Does USPS ever text you about a problem with your package?

Only if you specifically signed up for alerts through USPS Informed Delivery or Track & Confirm, for a specific shipment. Unsolicited texts about a vague package problem are not from USPS. The USPS Postal Inspection Service confirms they don't send out-of-the-blue texts requesting payment or personal information.

I clicked the link. What do I do right now?

Close the page and don't go back. If you entered any payment details or login credentials, call your bank or change your passwords immediately. For the full recovery checklist, see our guide on what to do after clicking a scam link.

The text had my real name and address. Doesn't that mean it's legitimate?

No — and this is the part that catches people. Names, mailing addresses, and phone numbers are widely available through data breaches and data brokers. Scammers buy these lists and use them to make texts look credible. Knowing your name proves nothing about who sent the message.

What's the tariff customs scam, and should I pay?

No. U.S. consumers don't typically pay tariffs directly upon receiving a package — that's handled between carriers and importers. A text claiming your package is stuck in customs because of new tariff rules and you need to pay to release it is a scam exploiting confusion about trade policy. Don't pay, don't click the link.

How do I report a delivery scam text?

Forward it to 7726 (works on most U.S. carriers). For USPS-impersonation texts, also forward the message to spam@uspis.gov. For all text scam fraud, file a report at ReportFraud.ftc.gov. Your report helps the FTC track patterns and issue warnings.

I already paid the "redelivery fee." Can I get my money back?

Possibly — act fast. If you paid by credit or debit card, call your issuer and dispute the charge as fraudulent. Most will reverse it. If you paid via Zelle or another instant transfer platform, contact your bank immediately. The sooner you report it, the better your chances.

---

Sources: FTC, "New FTC Data Show Top Text Message Scams of 2024; Overall Losses to Text Scams Hit $470 Million," April 2025; USPS Postal Inspection Service, "Smishing: Package Tracking Text Scams"; FCC, "How to Identify and Avoid Package Delivery Scams"; BBB Scam Tracker