Avoiding the pending package scam

Everyone loves a surprise package, but some surprises can be a warning sign. If you haven’t ordered anything and receive a text claiming a delivery is on its way, it could be a scam. These messages are designed to look harmless, but their goal is to trick you into clicking a link, sharing personal details or handing over money. Let’s break down how package delivery text scams work and show you how to spot the red flags and protect your peace of mind.

How the scam plays out

The victim receives a text message from a contact who is an alleged mail carrier or someone representing a package-delivery service. The contact tells the victim they were unable to deliver a package to the victim’s home. The message might claim the package is a gift from a friend or relative and may be worded professionally, making the scam difficult to spot.

The victim is asked to reply to the message to confirm their identity; however, as soon as they engage with the scammer, they will be asked to share their personal information or credit card details to schedule delivery. This, of course, places the victim at risk for identity theft.

In other variations of the scam, the victim is contacted by email or phone. In each scenario, the scam plays out similarly, with the victim convinced there’s a package waiting for them and willingly sharing sensitive data.

Some scammers take the ruse a step further by sending the victim a text message or an email containing an embedded link. The victim is instructed to click the link to track the package or change their delivery preferences. Unfortunately, clicking the link will download malware onto the victim’s device. Alternatively, the link connects the victim to a form asking for their personal information, which the victim often shares willingly.

Spot the red flags

There are two primary red flags to keep in mind about these package delivery scams:

First, scammers may claim to be USPS or identify themselves as employees of a generic "mail or package delivery service" without specifying a legitimate organization like UPS or FedEx.

Second, scammers may skip even verifying if you have a package and begin making assumptions about recent online orders or falsely claiming a surprise gift from a friend or family is on the way.

If either scenario aligns with your situation, be careful – it's likely a scam!

How to protect yourself from scams

Take these precautions to avoid being the next victim of a package delivery scam:

• Be skeptical of unsolicited communications. Your mail carrier and package-delivery services will never contact you via text message or phone call. If a package cannot be delivered, they will usually leave you a note on the door.
• Ignore “professional” emails sent from unsecured addresses. Any online communications from the USPS or a mail delivery agency will be sent via their own secure domain. Always be suspicious of emails sent from unsecured addresses.
• Track all incoming packages. After placing an order for an item, record the tracking number for the package so you can easily verify its whereabouts. This way, you can quickly confirm the authenticity of suspicious texts, emails or phone calls about your package.
• Never share personal information with an unverified contact. Take a step back when asked to share sensitive information via text, online or on a phone call. If you’re not expecting it, it’s probably not legitimate. If you suspect fraud, end the conversation immediately and do not engage further.
• Never click on links in unsolicited emails. Links in emails can download malware onto your computer or device. Don’t click links in emails from people you don’t know or from companies you have not asked to contact you. Remember that official-looking emails; popular brands can easily be spoofed.
• Avoid clicking text message links. If you get a text from someone claiming to be a package delivery service, don’t click the link. Oftentimes the message says the carrier was unable to deliver the package. They then ask you to click a link and share information like credit card details to reschedule delivery or pay an outstanding balance for shipping. Remember, if a legitimate delivery service like USPS can’t deliver your package, they’ll leave an official notice instead of texting you.

What to do if you’ve been targeted

It’s important not to engage with the scammer if you believe you’ve been targeted by this scam. Delete any suspicious text messages and block the number of the contact. Similarly, delete suspicious emails and mark them as spam. You can also report the scam to the local authorities and the Federal Trade Commission. Finally, it’s a good idea to warn your friends and family members about the circulating scam.