Package delivery scams: What they are and how to avoid them

The link between delivery fraud and phishing

The most common package scams are tied to phishing. In a phishing attack, opening a link may take you to a website where you’re asked to enter personal information or install malware on your computer or phone that can secretly steal information like passwords and login information. This is the goal in parcel delivery scams, too.

Microsoft Defender

Stay safer online with one easy-to-use app<sup>1

1</sup>Microsoft 365 Personal or Family subscription required; app available as separate download

Learn more

How package delivery scams work

If you’re going to guard against this kind of delivery fraud, it’s important to know how it works. Here’s the usual method:

• Scammers find your contact information. For scammers, this can be as random as collecting a directory of phone numbers or getting phone and email information from database breaches.
• Scammers send an email or text message about a package delivery. This message will claim that you’ve missed a package delivery. Often, it will include a tracking number that might seem legitimate.
• Scammers get you to open a phishing link. They might ask you to open a link to reschedule a delivery or request you pay a delivery fee to get your package.

Package delivery scams rely on text and email updates that you sign up for when ordering online—helpful features that can help you track a package as it’s being processed and provide you with updates if it gets lost in transit.

However, in a package delivery scam, you may find yourself getting calls and texts that claim you need to pay a delivery fee or a customs tax before the delivery can be completed. If you try to call these numbers or text them back, you might wind up interacting with a scam operator asking to verify your account information or the credit card number you used for a purchase. Once they have that info, scammers withdraw funds from your account or use your credit card themselves.

How to block package delivery scams

Whether a scammer is trying to get you to open a redelivery link or charge you a delivery fee, the most important step to protect yourself from phishing is to disregard any links. Block numbers that seem suspicious and report them to your delivery carrier or the Federal Trade Commission. Always go on the delivery carrier’s website directly to verify the tracking information and location of your package.

In order to verify a sender’s identity, you can find your tracking information through your online retailer’s tracking tools, too. Check estimated delivery times, current location, and which facilities the package was last processed and sent through for accurate info.

With the interconnectivity of our mobile devices, phishing attacks can come in all forms—and package delivery scams are just another way your personal information can be used for nefarious purposes. Learn more about how to stay secure while shopping online and how to keep your personal information away from prying eyes.