untrappable.Check

Package delivery scams: fake texts and mystery parcels

Editorially reviewed · Last updated September 8, 2026

Yes — this is a scam. An unexpected delivery message that sends you to a tracking or payment link is a phishing scam — check the shipment through the carrier yourself.

Exhibit · Text message

Text Message · Today 10:16 AM
from +1 (202) 555-0148
Parcel Service: We could not complete your delivery because the address is incomplete. Update your details within 12 hours to avoid return: parcel-status[.]info/update
Illustrative text message · not an original screenshot

Other versions you might get: Scammers may copy delivery, address, or customs notices, or add a QR code to an unordered package. Brushing is one possible explanation for a mystery parcel, but gifts and misdeliveries are possible too. Verify the order and recipient independently before paying or scanning.

What to do right now

  1. Don't tap the link, scan the QR code, reply, or pay. The delivery story is bait; the page behind it is the trap.
  2. Check the shipment another way. Open the store or carrier app yourself, or type the carrier's known website and use the tracking number from your order confirmation.
  3. If you entered card or bank details, call the provider now. Freeze or replace the card, dispute any charge, and watch for follow-up transactions.
  4. If you entered a password, change it on the real site and turn on two-factor authentication. Change it anywhere else you reused it.
  5. Report the message. Forward texts to 7726 (SPAM) and file at reportfraud.ftc.gov. For an unordered package, report the seller to the marketplace and check your shopping accounts and credit.

Reduce the risk of another scam

Reading the message or receiving an unordered package does not charge you. The risk starts when you use the link or QR code, enter details, or reuse a compromised shopping account. Secure what you entered, then see what to do if you were scammed.

● Public service · free steps first

Take the free protection steps first

A suspicious message does not tell us how someone found your details. If you shared personal information, start with the official recovery guidance. You can also freeze your credit for free.

Decide what protection you need

Start with the free controls above. Compare what a paid service would add only after deciding which problem remains.

Compare free and paid protection →

No purchase needed. How we use evidence.

Frequently asked

How do I know if a package delivery message is a scam?
Treat an unexpected delivery link as unverified, not automatic proof of fraud. USPS tracking-text guidance differs from other carriers: FedEx and DHL can send legitimate duty-payment links. Open the carrier or retailer independently, use your order’s tracking number, and check any fee with official support.
I am expecting a package — could the delivery text still be fake?
Yes. Scammers send delivery messages in bulk because many recipients happen to be waiting for something. A real order will appear in the store or carrier account you open yourself. If the supposed problem exists only through the text's link, don't use it.
What happens if I click a fake package tracking link?
The link usually opens a look-alike tracking or payment page that asks for your address, card, password, or other personal information. Close it. If you did not enter or download anything, the risk is usually low. If you entered details, secure the affected card or account immediately; the Postal Inspection Service advises notifying your financial institution even if you interacted with the URL but did not press submit.
Why did I receive a package I never ordered?
It may be a brushing scam. The FTC and Postal Inspection Service say sellers can use personal information found online to send cheap merchandise, then post fake reviews in the recipient's name. Don't scan a QR code or contact the sender. Change shopping-account passwords, check your credit and card statements, and report the seller to the marketplace.
Do I have to pay for or return an unordered package?
In the US, genuinely unordered merchandise sent to you does not create an obligation to pay. That does not mean you should keep a parcel addressed to somebody else or treat a known delivery mistake as a gift. Check the addressee and contact the carrier or retailer independently if unsure. Do not handle suspicious or unsafe contents further.

Related scams

TextScam

USPS text scam: is that delivery text real?

Got a USPS text about a held package, an address problem, or a redelivery fee? Here's the verdict and exactly what to do.

TextScam

FedEx text scam: is that delivery text real?

Got a text about a FedEx package on hold, a missed delivery, or a fee to pay? Here's the verdict and exactly what to do.

TextScam

UPS text scam: is that delivery text real?

Got a UPS text about a held package, a delivery fee, or an address you need to confirm? Here's the verdict and exactly what to do.

TextScam

Brushing scam: why did a package I didn't order arrive?

A package you never ordered showed up — maybe with a QR code to “claim a gift.” Here's what a brushing scam is, why it happened, and exactly what to do.

Sources

  1. 01Smishing: Package Tracking Text Scams— United States Postal Inspection Service
  2. 02How to Recognize and Report Spam Text Messages— Federal Trade Commission
  3. 03Brushing Scam— United States Postal Inspection Service
  4. 04Got a package you didn't order? It's probably a scam— Federal Trade Commission
  5. 05Paying FedEx duties and taxes without an account— fedex.com
  6. 06DHL customs duties and taxes— uk.express.dhl.com

Pass it on

Help protect someone else

If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. It's safe to forward, and stands on its own as a record for a bank or the police.