Chapter 6 of 12
10 min

Package Delivery Scams

Learning Objectives:

    Package Delivery Scams

    In 2024, delivery notification scams increased by 174%, exploiting our reliance on online shopping and package deliveries. These scams impersonate trusted logistics companies to steal personal information, payment details, and credentials.

    The Scale of the Problem

    2024 Statistics:

    • 174% increase in delivery service smishing
    • USPS most impersonated carrier (40% of fake messages)
    • $1.99 typical fake "redelivery fee" to steal payment info
    • 26% click-through rate on fake delivery links
    • Messages spike during holiday shopping seasons (Nov-Jan)

    Common Delivery Scams

    1. Fake Delivery Failure Notices

    Scammers send texts or emails claiming your package couldn't be delivered:

    USPS: Your package could not be delivered.
    Update your address to reschedule delivery:
    [shortened link]
    

    Reality: USPS leaves physical notices and updates via their official app.

    2. Redelivery Fee Scams

    Messages claim you need to pay a small fee ($1.99-$3.99) to receive your package:

    FedEx: Your package is awaiting delivery.
    Pay $1.99 redelivery fee here: [link]
    

    Reality: Legitimate carriers don't charge redelivery fees via text message links.

    3. Customs/Tax Payment Scams

    For international shipments, scammers claim customs fees are due:

    Your package from China is held at customs.
    Pay import tax ($35.67) to release: [link]
    

    Reality: Customs fees are paid through official government websites or at delivery.

    4. Package Survey Scams

    Fake surveys about your delivery experience that lead to phishing:

    How was your Amazon delivery experience?
    Take our 30-second survey and get a $50 gift card!
    

    Reality: Legitimate surveys don't promise rewards or ask for payment info.

    5. Delivery Driver Impersonation

    Scammers pose as drivers asking for gate codes, access, or "verification":

    Hi, I'm your UPS driver. I need your gate code
    to deliver your package today. Reply with code.
    

    Reality: Drivers have access codes provided by facilities or will call officially.

    Red Flags: How to Spot Fake Delivery Messages

    ๐Ÿšฉ Unexpected notification for package you didn't order ๐Ÿšฉ Shortened URLs (bit.ly, tinyurl) instead of official domains ๐Ÿšฉ Payment requests via text message link ๐Ÿšฉ Urgent language ("final attempt," "expires today") ๐Ÿšฉ Generic greetings ("Dear Customer" instead of your name) ๐Ÿšฉ Spelling errors in company name or message ๐Ÿšฉ Suspicious sender (not from official carrier number/email) ๐Ÿšฉ Requests for sensitive info (SSN, password, full card number) ๐Ÿšฉ Prize or reward for completing survey ๐Ÿšฉ Pressure to act immediately without verification

    What Legitimate Carriers Actually Do

    USPS (United States Postal Service)

    • โœ… Leaves pink notice slips (PS Form 3849) for missed deliveries
    • โœ… Sends tracking updates via USPS.com (if you enrolled)
    • โœ… Never sends payment requests via text
    • โœ… Official texts come from 28777 or 2USPS (if enrolled)

    FedEx

    • โœ… Sends tracking updates from @fedex.com email addresses
    • โœ… Texts from 37773 (if you enrolled in FedEx Delivery Manager)
    • โœ… Never charges redelivery fees
    • โœ… Provides tracking numbers you can verify on FedEx.com

    UPS

    • โœ… Sends notifications from @ups.com email addresses
    • โœ… UPS My Choice members get texts from 63679
    • โœ… Never asks for payment via text message
    • โœ… Tracking numbers verifiable on UPS.com

    Amazon

    • โœ… Sends order notifications from @amazon.com addresses
    • โœ… All tracking available in your Amazon account/app
    • โœ… Never sends survey links with reward promises
    • โœ… Customer service accessed through your account, not links

    Verification Procedures

    Before Clicking Any Link:

    1. Don't click links in unexpected delivery messages
    2. Open carrier app or website independently
      • Type the official URL directly (usps.com, fedex.com, ups.com)
      • Use your bookmarked links
      • Use official mobile apps
    3. Check your order history
      • Review recent purchases
      • Verify you're expecting a delivery
    4. Examine the tracking number
      • USPS: 20-22 digits, starts with 94 or 93
      • FedEx: 12-14 digits
      • UPS: Starts with "1Z"
      • Amazon: TBA followed by 13 digits
    5. Verify sender information
      • Check sender email domain carefully
      • Look for official carrier phone numbers

    If You're Unsure:

    • Call official customer service (number from carrier's website, not message)
    • Visit carrier location with tracking number
    • Check your email for order confirmations from actual retailers
    • Use official apps to track all shipments

    Real-World Examples

    Case Study 1: Holiday Season USPS Scam (December 2024)

    During Black Friday week, scammers sent 2.3 million fake USPS texts:

    USPS: Your package (tracking: 9400123456789) requires
    address update. Confirm here: usps-delivery[.]com/update
    

    Red flags:

    • Domain was usps-delivery[.]com (not usps.com)
    • No package expected
    • Tracking number format incorrect
    • Asked for SSN and payment info on "verification" page

    Result: Victims who entered information had identities stolen and bank accounts drained.

    Case Study 2: Fake Amazon Delivery Survey (Summer 2024)

    Scammers impersonated Amazon with prize survey scams:

    Your Amazon package was delivered! Rate your
    driver and claim your $100 Amazon gift card: [link]
    

    Red flags:

    • Link went to amazon-rewards[.]net (not amazon.com)
    • No recent Amazon delivery occurred
    • Gift card promise too good to be true
    • Asked for credit card for "$1 processing fee"

    Result: Credit card information stolen, used for fraudulent purchases.

    Case Study 3: FedEx Redelivery Fee Scam (October 2024)

    Targeted scam during holiday shopping season:

    FedEx: Delivery attempt failed. Your package
    will be returned unless you pay $2.99 redelivery
    fee within 48 hours: [link]
    

    Red flags:

    • FedEx doesn't charge redelivery fees
    • Urgency ("48 hours")
    • Payment link instead of official FedEx site
    • Sender was "FedEx" but email was delivery-update@fed3x[.]com

    Result: Payment information stolen, multiple fraudulent charges followed.

    Protection Strategies

    For Individuals:

    1. Enroll in official tracking programs

      • USPS Informed Delivery (see mail before it arrives)
      • FedEx Delivery Manager
      • UPS My Choice
      • Amazon app notifications
    2. Use official mobile apps

      • USPS Mobileยฎ app
      • FedExยฎ Mobile app
      • UPS Mobile app
      • Amazon Shopping app
    3. Set up delivery preferences

      • Hold packages at facilities
      • Require signature
      • Set specific delivery instructions
    4. Enable account security

      • Strong passwords for carrier accounts
      • Two-factor authentication where available
      • Monitor account activity regularly
    5. Track orders at source

      • Keep retailer order confirmation emails
      • Use retailer's tracking links, not random texts
      • Check retailer website for status updates

    General Best Practices:

    • Never click links in unexpected delivery texts
    • Always type URLs directly or use official apps
    • Don't provide payment info via text message links
    • Verify tracking numbers through official channels
    • Be extra cautious during holiday seasons
    • Report suspicious messages to carrier fraud departments

    What To Do If You Fell for a Delivery Scam

    Immediate Actions:

    1. Don't panic, but act quickly

      • Time is critical for damage control
    2. If you entered payment information:

      • Call your bank/card issuer IMMEDIATELY
      • Report the fraud and request new cards
      • Dispute any unauthorized charges
      • Monitor accounts daily for 60 days
    3. If you entered personal information:

      • SSN entered: Place fraud alert with credit bureaus (Equifax, Experian, TransUnion)
      • Address/phone entered: Monitor for identity theft
      • Email/password entered: Change passwords on all accounts immediately
      • Enable two-factor authentication everywhere possible
    4. Document everything:

      • Screenshot the fake message
      • Save the fraudulent website URL
      • Note date/time you interacted with scam
      • Keep records of all fraud reports

    Report the Scam:

    • FTC: ReportFraud.ftc.gov
    • FBI IC3: ic3.gov (if over $1,000 lost)
    • Actual carrier:
      • USPS: uspis.gov/report
      • FedEx: fedex.com/en-us/trust-center/report-fraud.html
      • UPS: ups.com/us/en/help-center/report-fraud.page
      • Amazon: amazon.com/reportphishing
    • Your phone carrier: Forward spam to 7726 (SPAM)
    • State Attorney General: consumer protection division

    Follow-Up Actions:

    • Monitor credit reports for 12 months (AnnualCreditReport.com)
    • Consider credit freeze if SSN was compromised
    • Watch bank statements closely
    • Change passwords on all important accounts
    • Enable alerts for account activity

    Key Takeaways

    • โœ… 174% surge in delivery scams targets online shoppers
    • โœ… Never click links in unexpected delivery notifications
    • โœ… Always verify through official carrier apps and websites
    • โœ… Real carriers never request payment via text message links
    • โœ… Enroll in official tracking services for legitimate notifications
    • โœ… Watch for red flags: Urgency, payment requests, shortened URLs
    • โœ… Report scams to carriers and FTC to protect others
    • โœ… Act immediately if you've shared payment or personal information

    Remember: When in doubt, go directly to the carrier's official website or app. Never click links in unsolicited delivery notifications. Legitimate packages can wait a few minutes for you to verify their authenticity safely.