Why package scams work
Many people have a package in transit at any given time. The scammer does not need to know your real order if the message lands on the right day.
A small fee can feel harmless, but the fake checkout may be designed to collect card details or account credentials.
USPS smishing
USPS Inspection Service says unsolicited messages with unfamiliar links claiming a USPS delivery needs a response are a smishing pattern. Legitimate USPS tracking texts are initiated by the customer and the agency warns not to click unsolicited links.
Use USPS.com or the official tracking method independently.
Other carriers and retailers
Scammers also imitate private carriers and online stores. The principle remains the same: open your order history or the official carrier app yourself.
Do not rely on the message link or phone number.
Look for payment and address requests
A message may request a small redelivery fee, card verification, address confirmation, or login. That information can be more valuable than the small charge itself.
Do not enter it on a site reached through an unexpected text.
What if you clicked?
If you did not enter information, close the page. If you entered card details, contact the card issuer. If you entered account credentials, change them through the official service.
USPS Inspection Service advises contacting your financial institution if you interacted with a fraudulent URL and provided sensitive information.
Reporting the message
USPS provides instructions for reporting USPS-related smishing, and suspicious texts can also be forwarded to 7726.
Preserve a screenshot if you plan to report before deleting the text.
Quick Reference
| Message claim | Verify by |
|---|---|
| Address incomplete | Retailer order page / carrier site |
| Small redelivery fee | Official carrier account |
| Package held | Official tracking number |
| Customs/payment due | Carrier/customs contact found independently |
| Click to schedule delivery | Official app/site |
Check the Red Flags
Use the Scam Red-Flag Checker to review common warning signs without entering sensitive account information.
Check your order from the retailer or carrier directly
A delivery text can arrive at a believable moment because many people are waiting for packages. The message may say an address is incomplete, a small fee is due, or delivery failed.
Open the retailer or carrier’s official app or website and enter the tracking information there instead of using the message link.
A small fee can be bait for card details
The requested amount may be only a few cents or dollars because the scammer wants the payment-card information more than the fee itself.
Do not enter card details into a delivery page reached through an unexpected text. Verify any genuine charge through the official service.
Look for a tracking number you can verify
A vague message that never identifies the actual shipment deserves extra caution. Even when a tracking number appears, verify it through the carrier’s known site rather than trusting the link.
If you are not expecting a package, there is even less reason to interact with the message.
After clicking, separate viewing from submitting
Opening a page is different from entering a password, card number, or other information. If you only opened the page, close it and avoid downloading anything.
If you submitted sensitive information, take the appropriate follow-up action for the specific information you entered.
Use time and independent verification as your advantage
The person trying to scam you usually wants speed. Your advantage is that you can stop. You can hang up, close the message, call someone you trust, and verify the claim through an official route you choose yourself.
You do not have to identify the exact scam before protecting yourself. If an unexpected contact wants money, sensitive information, a security code, remote access, or secrecy, stop the interaction and verify before doing anything else.
Use the same verification routine every time
A consistent routine is easier to remember than a different response for every scam. Stop the interaction, identify what the person is asking for, and verify through a contact method you choose. Do not let the caller, text, or email supply the only route back to the organization.
For family emergencies, call the relative or another family member directly. For financial accounts, use the official app, card, or statement. For government or benefit questions, use the agency’s known website or published contact information.
Protect verification codes and remote access
One-time codes, password-reset links, security approvals, and remote-access permissions can give another person a direct path into an account or device. Treat them as highly sensitive even when the person asking sounds professional or urgent.
If you did not start the sign-in or support session yourself, do not approve it. A surprise request for a code or remote-control software is a reason to stop and verify independently.
Do not make payment while someone is pressuring you
Scammers often stay on the phone or in the chat while they tell you exactly how to buy gift cards, move money, use cryptocurrency, or complete a transfer. That constant contact prevents you from getting another opinion.
End the conversation before taking any payment step. A legitimate bill or emergency can be checked through another source, and a genuine organization will still be there after you verify the request.
Review what information may already be public
A caller knowing your name, address, relatives, former employer, or other personal details does not prove that the story is real. Some information is public, commercially available, or exposed in old data breaches.
Use privacy settings on social media where appropriate, but do not rely on secrecy alone. The stronger habit is independent verification whenever an unexpected contact asks for money, account access, or sensitive information.
Keep a short response script near the phone
If pressure makes it hard to think, keep one sentence ready: “I do not make payments or give account information on unexpected calls. I will contact the organization myself.” Then hang up.
You do not need to debate, accuse, or explain. A simple script gives you permission to end the interaction and move to a safer verification process.
Sources
Frequently Asked Questions
Does USPS send tracking texts?
Yes when the customer initiates text tracking for a specific package, but USPS warns against unsolicited tracking texts with unfamiliar links.
Can a scammer know I am expecting a package?
Sometimes, but often they simply send many messages and rely on coincidence.
Is a small $1 or $2 fee harmless?
No. The fake page may be collecting card details or credentials.
What if I clicked but did not submit anything?
Close the page. If anything was downloaded or installed, take additional device-security steps.
Where can I check a real package?
Use the retailer’s order page or the carrier’s official website or app.
Keep this visual on Pinterest
Save the infographic so you can return to the checklist or comparison when you need it.
Save on Pinterest