How to Spot a Package Delivery Text Scam Before You Tap the Link

Patrol Blog · 1 November 2026 · Reading time: about 5 minutes

Learning how to spot a package delivery text scam starts with one habit: never use the link in the text. The message says your package is held, your address is incomplete, or a small fee stands between you and your parcel. It counts on you expecting a delivery — because these days almost everybody is. Tap, and you land on a page dressed up as a carrier, built to take your card number and sometimes your Social Security number.

The fix is not a sharper eye for logos. The copies are good now. The fix is a routine that works even when the copy is perfect.

The most reported text scam in the country

The Federal Trade Commission's data spotlight on the top text scams of 2024, released in April 2025, put fake package delivery problems at number one — the most reported text scam in the country. People reported $470 million in losses to text scams of all kinds that year, more than five times the 2020 figure — and most fraud is never reported, so the real total runs higher.

The delivery text needs no personal detail to work. No name, nothing about you at all. It just needs a phone number and the odds that a box is on its way to your house — odds that climb every week between now and Christmas.

How to spot a package delivery text scam in ten seconds

Postal inspectors call this package delivery smishing — phishing by text. Run any delivery text through these checks before your thumb moves:

• It arrived out of nowhere. You never asked that carrier for text updates on this package.
• It carries a link. For the Postal Service, this settles it on its own — see below.
• A small fee will free the package. A redelivery fee, a dollar or two on a card. The fee is not the theft. Your card number is.
• A deadline is ticking. Pay within hours or the parcel goes back. Real carriers redeliver. Scammers expire.
• The story keeps changing shape. Held, wrong address, missed signature. The newest costume, the FCC warns, is a tariff bill: since new import rules took effect in August 2025, texts claim a package is stuck in customs until you pay a duty through the link.
• It wants a reply. Even "STOP." A reply tells the sender the number is live.

One check failing is enough.

The USPS rule that settles it

The U.S. Postal Inspection Service states its rule plainly. USPS will not text you about a package unless you first requested tracking updates for that specific package. And a real USPS tracking text will not contain a link. USPS sends from 5-digit short codes, and tracking is free.

Read that rule the way it is written. A text that says "USPS" and hands you a link is a fake delivery text message scam, whatever the logo looks like. The FCC notes FedEx and UPS do not seek payment or personal information through unsolicited texts either. A carrier name in a message proves the sender can type it. Nothing else.

Check the delivery the safe way

Close the text. Then check on ground you walked to yourself:

1. Open the store's app or type its address yourself, and look at the order there. If it says delivered or on schedule, the text was lying.
2. Type the carrier's address yourself and enter the tracking number from your order confirmation — not the number in the text.
3. Keep a list of what you have ordered, as the Better Business Bureau suggests. A notice for a package nobody ordered answers itself.
4. Households: agree the rule out loud, the same way you would set a family code word for scams. No one pays a fee, fixes an address, or taps a tracking link that arrived by text. Grandparents get the rule twice.

An unordered package deserves the same suspicion. Postal inspectors call it brushing: a box you never ordered, sometimes carrying a code you are invited to scan. Do not scan it — that trick has its own file in this patrol's QR code scam write-up.

If you already tapped, or paid

It happens to careful people. What matters is the next ten minutes:

• Call your bank or card issuer now, on the number on the back of the card — even if you closed the page without pressing submit.
• Change the password on any account whose password you typed there, and anywhere else it is reused.
• Watch the card for small test charges after. The fee was never the point; the number is, and it gets used later.
• Do not call the number in the text back. The FCC warns a call-back can reach a fake operator fishing for card details.

Report it, then delete it

Knowing how to report a scam text message takes under a minute:

• Forward the text to 7726 — it spells SPAM. Your carrier uses those forwards to block the same message for everybody else.
• USPS costume? Email a screenshot showing the sender's number and date to the Postal Inspection Service at spam@uspis.gov, with the message text pasted in.
• File it with the FTC at ReportFraud.ftc.gov. Thousands of reports counted together are how the FTC knew delivery texts topped the list.

Then delete the text. The parcel you are waiting for will show up in the store's app, on the carrier's real site, and on your porch — none of which requires your card number in a text thread. Learn who is behind this patrol on the About page, and if a delivery text has already taken money from somebody in your house, report a tether with the number it came from and the story it told. Patrolling the online borders, one tether at a time.