untrappable

Package delivery scams: fake texts and mystery parcels

Editorially reviewed · Last updated August 12, 2026

Yes — this is a scam. An unexpected delivery message that sends you to a tracking or payment link is a phishing scam — check the shipment through the carrier yourself.

Text Message · Today 10:16 AM
from +1 (202) 555-0148
Parcel Service: We could not complete your delivery because the address is incomplete. Update your details within 12 hours to avoid return: parcel-status.info/update
The Text message, as received

Other versions you might get: A text or email about a failed delivery, an incomplete address, a customs charge, or a small redelivery fee; a QR code inside an unordered package that promises to reveal the sender; or a cheap item you never bought. The message-and-link version steals details. The mystery-package version is usually brushing: someone used your details to create a fake sale or review.

What to do right now

  1. Don't tap the link, scan the QR code, reply, or pay. The delivery story is bait; the page behind it is the trap.
  2. Check the shipment another way. Open the store or carrier app yourself, or type the carrier's known website and use the tracking number from your order confirmation.
  3. If you entered card or bank details, call the provider now. Freeze or replace the card, dispute any charge, and watch for follow-up transactions.
  4. If you entered a password, change it on the real site and turn on two-factor authentication. Change it anywhere else you reused it.
  5. Report the message. Forward texts to 7726 (SPAM) and file at [reportfraud.ftc.gov](https://reportfraud.ftc.gov). For an unordered package, report the seller to the marketplace and check your shopping accounts and credit.

How to make sure it never bites you

Reading the message or receiving an unordered package does not charge you. The risk starts when you use the link or QR code, enter details, or reuse a compromised shopping account. Secure what you entered, then see what to do if you were scammed.

Untrappable · Public service advisory

Stop the next one at the source

You got this because your details are on lists that get bought, sold, and leaked. You can't unspill that, but you can make it useless to a scammer. Start with the free steps — they do most of the work.

Optional — if you'd rather it was handled for you

If you'd rather have it watched for you, an identity-protection service monitors your accounts, SSN, and the dark web, warns you the moment something new appears, and helps you recover if someone gets through.

See identity protection →

Affiliate link — we may earn a commission at no extra cost to you. It never changes our verdicts. Why we can still be trusted.

Keep this · forward it to someone who needs it

Frequently asked

How do I know if a package delivery message is a scam?
Treat it as a scam when it arrives unexpectedly and asks you to fix an address, pay a fee, or track a parcel through its link. The Postal Inspection Service says a USPS tracking text is only sent after you request tracking for a specific package, and a genuine USPS message will not contain a link. For any carrier, ignore the message and check the order in the carrier or retailer's app instead.
I am expecting a package — could the delivery text still be fake?
Yes. Scammers send delivery messages in bulk because many recipients happen to be waiting for something. A real order will appear in the store or carrier account you open yourself. If the supposed problem exists only through the text's link, don't use it.
What happens if I click a fake package tracking link?
The link usually opens a look-alike tracking or payment page that asks for your address, card, password, or other personal information. Close it. If you did not enter or download anything, the risk is usually low. If you entered details, secure the affected card or account immediately; the Postal Inspection Service advises notifying your financial institution even if you interacted with the URL but did not press submit.
Why did I receive a package I never ordered?
It may be a brushing scam. The FTC and Postal Inspection Service say sellers can use personal information found online to send cheap merchandise, then post fake reviews in the recipient's name. Don't scan a QR code or contact the sender. Change shopping-account passwords, check your credit and card statements, and report the seller to the marketplace.
Do I have to pay for or return an unordered package?
No. The Postal Inspection Service says you are under no obligation to pay for unsolicited merchandise and may keep it. If it is unopened and has a return address, you can mark it return to sender. If the contents seem unsafe, do not handle them further; follow the Postal Inspection Service's suspicious-mail guidance.

Related scams

Sources

A public service

Help protect someone else

Scams spread because people stay quiet about them. If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. Passing it on is the easiest good thing you'll do today. It's safe to forward, and stands on its own as a record for a bank or the police.