A message claiming that a package is delayed, a delivery address is incomplete, or a small redelivery fee is due can prompt a quick tap. Scammers imitate delivery companies because people often expect parcels. The safest response is to verify the issue independently instead of trusting the link in the message.
Warning signs
- The message says you must act immediately or the parcel will be returned.
- The link uses a shortened address, misspelled brand name, or unfamiliar domain.
- You are asked to pay an unexpected fee, provide a card number, or enter a one-time login code.
- The message arrives when you are not expecting a parcel or lacks a tracking number you recognize.
- A follow-up asks you to install an app from outside the official app store.
Verify a delivery the safer way
- Do not tap the message link or reply with personal details.
- Open the retailer’s order page or type the carrier’s official web address yourself.
- Enter the tracking number from your original order confirmation, if available.
- If the carrier reports a genuine issue, use the contact details on its official site to resolve it.
- Report the suspicious message through the carrier’s published process and your phone’s spam-reporting feature.
If you already clicked
If you opened a page but entered nothing and installed nothing, close it and avoid further interaction. If you entered a password, change it from the real service’s website and update any other account using the same password. If you submitted payment details, contact the card issuer using the number on the card or its official app. If you installed an app, remove it and use trusted device-security guidance to check the phone.
If you shared a one-time code or approved an unexpected login, secure the account immediately from a trusted device, sign out other sessions if the service offers that option, and review recovery settings. For suspected U.S. identity theft, IdentityTheft.gov provides a recovery plan.
Keep shopping accounts safer
Use unique passwords and multifactor authentication, keep your phone updated, and turn on purchase notifications. Be cautious with QR codes on unexpected labels or notices; our QR-code scam guide explains how to inspect links before opening them.
The FTC’s phishing guidance offers more examples of suspicious messages. Remember: a message can include your name or a realistic logo and still be fraudulent. Verify the request outside the message.
