The parcel and delivery scam

« Your package is awaiting delivery, settle the customs fees », « We couldn’t deliver to you, click to reschedule » : these messages, received by SMS or email, have become one of the most widespread scams. They capitalize on a simple fact: we order a lot online, and often wait for a package. Scammers exploit this to trick us, steal our information, or our money. The worst part? These messages sometimes arrive right when we’re actually expecting a delivery, making them terrifyingly effective. Here’s how to recognize the package scam, how to react, and how to avoid falling for the trap.

How the package scam works

The package scam (or delivery scam) is a particularly effective form of phishing, due to its credible staging. The PRINCIPLE: you receive a message (SMS or email) that claims to concern a PACKAGE: pending delivery, failed delivery, fees to pay, address to confirm; the message urges you to act (click, pay, provide information). The goal: to steal your personal and banking information, or to make you pay fake « fees ». Why it’s SO effective: because it’s perfectly timed; we often order online and regularly wait for a package; receiving a message about « your package » right when you’re expecting one seems PLAUSIBLE; it’s this coincidence that makes so many people fall for it. Common FORMS: « your package is blocked, pay customs/delivery fees » (to extort payment and your banking details); « we couldn’t deliver to you, click to reschedule » (to lead you to a fake site that steals your information); « confirm your address » (to collect your data); imitating a known carrier or delivery service (logo, name). What happens if you TAKE THE BAIT: you click on the link; you arrive on a fake site imitating a carrier; you enter your personal information and sometimes your banking details (to pay the « fees »); the scammers get everything; you end up with stolen data, fraudulent payments, or malware. The CHANNELS: mostly via SMS (« smishing ») and email (our guides on recognizing phishing emails). Why is it important to understand? To RECOGNIZE these messages and not fall for them; to not be tricked by the coincidence (waiting for a package); and to react correctly. The key idea: the package scam is a fake message (SMS or email) claiming to concern a delivery, to push you to click, pay, or provide your information. It’s terrifyingly effective because it’s perfectly timed: we order a lot online, often wait for a package, and the message then seems plausible. The lifesaving reflex: NEVER click on the link in such a message, and verify directly with the real carrier or in your order account. A real package tracking does not go through a link that demands payment or your information urgently.

How to recognize and react

Here’s how to outsmart the package scam. BE WARY by default — as soon as a message talks about a package and asks you to CLICK, PAY, or provide information, be on your guard: it’s the classic scam scheme. DO NOT CLICK on the link — this is the golden rule: never click on the link in an unexpected or suspicious package message; the link leads to a fake site that steals your information. VERIFY directly at the source — if you’re expecting a package, check its tracking YOURSELF: in your account on the site where you ordered, or on the official carrier’s website (by typing its address yourself, not via the message’s link); you’ll see the real status. Be wary of PAYMENT requests — a message asking you to pay « customs fees, » « delivery fees, » or others to « unblock » a package is very suspicious; any real fees are settled through official channels, not via a link received by SMS; never give your banking details this way. Spot the SCAM signs — urgency, pressure, a strange sender address or number, an odd link, typos, an unexpected carrier: all red flags. DO NOT GIVE any information — no personal information, no banking details, no login credentials, in response to such a message. In case of DOUBT, do NOTHING — if you’re unsure, it’s better to ignore the message and verify yourself; you won’t miss a real package by ignoring a fake message (the real carrier has other ways to contact you). REPORT and delete — you can report these fraudulent messages (there are mechanisms for this) and delete them; do not respond. If you’ve FALLEN for it — if you clicked and entered information: react quickly (see precautions: change your passwords, notify your bank if you provided banking details). A few TIPS:

• Never click, verify at the source;
• Be wary of payment requests for a package;
• And in doubt, ignore.

In summary: be wary of any package message urging you to act, NEVER click on its link, verify the tracking directly in your account or on the official carrier’s website, do not pay or provide information, and in doubt, ignore and report. This way, you’ll outsmart this very common scam.

The right reflex. When faced with a message about a package, remember ONE simple rule that protects you from almost all of these scams: NEVER click on the message’s link; always verify YOURSELF, directly at the source. In practice: if you receive an SMS or email stating that a package is pending, blocked, or couldn’t be delivered, do not touch the link it contains. Instead, if you’re actually expecting a package, check its tracking independently: log in to your ACCOUNT on the site where you placed the order (which displays the real status of your deliveries), or go to the official carrier’s website by typing its address yourself in your browser (never via the message’s link). You’ll see the reality: either everything is normal, or the message was fake. This simple habit — verifying at the source rather than clicking — disarms the trap, as scammers count precisely on you clicking on THEIR link to THEIR fake site. Second key reflex: be as wary as possible of any PAYMENT REQUEST related to a package. « Pay the customs fees, » « pay the delivery fees to unblock your package »: these requests, especially via a link received by SMS, are almost certain signs of a scam; never give your banking details this way. Finally, keep in mind what makes these scams so effective: they sometimes arrive RIGHT when you’re actually expecting a delivery, making them credible. Don’t let this coincidence lull you: the fact that you’re expecting a package doesn’t make the message legitimate; verify at the source anyway. And rest assured: by IGNORING a suspicious message, you’ll never miss a real package — a real carrier has other reliable ways to contact you, and your order always appears in your account. Never click, verify at the source, be wary of payment requests, and don’t be tricked by the coincidence: with these reflexes, the package scam has no hold on you.

What to do if you’ve fallen for it, and how to protect yourself

No one is immune to clicking in a moment of inattention; here’s how to react and how to protect yourself. If you’ve CLICKED but entered nothing: if you only clicked on the link without filling anything out or downloading, the risk is lower; do not enter anything, close the page, and as a precaution, check your device (updates, possible security tool). If you’ve GIVEN information: ACT QUICKLY. If you entered login details (password), CHANGE them immediately on the affected accounts (our guides on what to do if a password is stolen). If you provided your BANKING DETAILS or made a « payment, » contact your bank IMMEDIATELY: report the fraud, make a stop payment if necessary, monitor your accounts; time is of the essence. Monitor your ACCOUNTS: after such an incident, keep an eye on your bank statements and online accounts to spot any unusual activity. REPORT the scam: there are official mechanisms to report fraudulent messages (SMS or emails); doing so helps fight these scams. How to PROTECT yourself in the future: adopt the permanent reflex of never clicking on package message links and verifying at the source; secure your accounts (strong and unique passwords, two-factor authentication) to limit damage in case of an incident; keep your devices up to date; and inform your LOVED ONES, especially vulnerable people (elderly), who are heavily targeted by these scams. Do NOT BLAME YOURSELF: these scams are designed to deceive and are very well done; the important thing is to react quickly if you’ve fallen for it and to learn for next time. Stay vigilant about OTHER similar scams: the package scam is a variant of phishing; the same reflexes apply to fake bank or government messages, etc. (our guides on recognizing phishing emails). In summary: if you only clicked, stay cautious and do not enter anything; if you provided information, change your passwords and notify your bank without delay; monitor your accounts, report the scam, and in the future, never click and verify at the source; also inform your vulnerable loved ones. Reacting quickly limits the damage; vigilance prevents it.

Warning: if you’ve given your banking details or paid, contact your bank IMMEDIATELY. These package scams are so well done, and sometimes arrive so opportunely (just when you’re expecting a delivery), that anyone can be tricked in a moment of inattention; don’t blame yourself if it happens to you, but REACT quickly, as speed limits the damage enormously. The most serious case: you clicked on the link, arrived on a fake site imitating a carrier, and entered your BANKING DETAILS (to « pay fees ») or made a payment. In this case, contact your bank IMMEDIATELY, without waiting: report the fraud to them, ask to stop payment or block your card if necessary, and follow their instructions; banks are used to these situations and can often limit or cancel the damage if you act quickly. Then, closely monitor your statements to spot any fraudulent transactions and report them. If you entered LOGIN DETAILS (a password, for example, believing you were logging into your carrier account or another service), change this password IMMEDIATELY on the affected account, as well as on any other account where you might have used the same password (that’s why you should never reuse a password). If you only CLICKED on the link without entering anything or downloading, the risk is much lower: do not fill anything out, close the page, and check your device (updates, security) as a precaution. In all cases, REPORT the scam via official fraudulent message reporting mechanisms: this helps fight these scams. Finally, think of your LOVED ONES: these scams particularly target vulnerable people, especially the elderly, who can be more easily tricked; warn them about the existence of these fake package messages, explain that they should never click or pay, and offer to help them if they’re in doubt. The general rule to pass on to them as to yourself: real package tracking is never done via a link received by SMS that demands payment or information urgently; in doubt, you don’t click, you verify yourself with the carrier or your order account. React quickly if you’ve fallen for it (bank, passwords), report, and protect your loved ones: this is how you limit the consequences of these all-too-common scams.

Frequently asked questions

I’m actually expecting a package, how do I know if the message is real?

This is exactly the TRAP situation, the one where you’re most vulnerable; but the rule remains the same and protects you: do not trust the message, verify yourself at the source. The fact that you’re actually expecting a package does NOT make the message legitimate: scammers send these fake messages in bulk, and it often happens that they arrive, purely by coincidence, right when someone is expecting a delivery — it’s this coincidence that makes them so effective. Don’t let this coincidence lull you. To know if your package has a real problem, NEVER click on the message’s link; verify independently: log in to your ACCOUNT on the site where you placed the order (the real status of your delivery is displayed there), or go to the official CARRIER’S website by typing its address yourself (not via the received link), and enter your tracking number that you received when ordering. You’ll thus obtain the real status: if everything is normal, the message was fake; if a real problem exists, you’ll see it through this official channel. A few signs that betray the fake message: it asks you to PAY to « unblock » the package (real fees, if any, are not settled this way via an SMS link); it urges you to act urgently; the sender or number is strange; it concerns a carrier you weren’t expecting. In case of doubt, the safest thing is simply to IGNORE the message and verify yourself: you’ll never miss a real package by ignoring a fake message, as a real carrier has other reliable ways to contact you, and your order always appears in your account. In summary, even when you’re expecting a package: do not click, verify the tracking yourself in your account or on the official carrier’s website, and be wary of any payment request; this is how you’ll distinguish the real from the fake without risk.

Why do these package scams work so well?

These scams are among the most effective, for several reasons that combine. The first, essential: PLAUSIBILITY. We order a lot online today, and therefore often wait for a package; receiving a message that talks about « a package » is nothing out of the ordinary and seems credible — especially if it arrives, by coincidence, at the moment when you’re actually expecting a delivery. Scammers send these messages in bulk; statistically, many arrive with people who are actually expecting something, and the trap closes. The second reason: URGENCY and the fear of MISSING your package. The message creates a sense of urgency (« package blocked, » « last delivery attempt, » « action required within 24 hours ») that pushes you to act quickly, without thinking; you don’t want to miss your delivery, so you click. This pressure bypasses vigilance. Third reason: the careful IMITATION. The fake messages and fake sites well imitate the real carriers (logos, names, layout); at first glance, it seems authentic. Fourth reason: the BANALITY of the requested action. « Click to reschedule, » « confirm your address » seem like harmless and normal actions in the context of a delivery; you don’t suspect anything. Finally, these scams target everyone, including less tech-savvy people (elderly) who are particularly targeted. Understanding why these scams work helps to better defend against them: knowing that the coincidence « I’m expecting a package » is precisely the lever used, you learn not to trust it; knowing that urgency is a weapon, you take the time to verify; knowing that the imitation is good, you don’t trust appearances. The universal countermeasure remains the same: never click on the link, and verify yourself at the source (your account, the official carrier’s website). In summary, these scams work because they are plausible, urgent, well imitated, and seemingly harmless; by knowing these mechanisms, you spot them and no longer fall for them.

How to protect my loved ones from these scams?

Protecting loved ones, especially vulnerable people like the elderly, mainly involves INFORMATION and a few simple rules to pass on to them. These scams particularly target people less comfortable with technology, who can be more easily tricked; warning them is therefore essential. What you need to EXPLAIN to them, simply: that there are fake messages (SMS and emails) claiming to concern a package, sent by scammers to steal information and money; that these messages seem real, especially when you’re expecting a delivery, but that you should not trust them. The golden rule to give them, clear and easy to remember: « NEVER click on the link in a package message, and NEVER pay or provide information; in case of doubt, call me. » Emphasize the warning signs: any request to PAY to « unblock » a package is a scam; urgency is a trap. Teach them to VERIFY otherwise: if a package is really expected, you look at the tracking in your order account or ask for help, rather than clicking on a link. Offer to be their RESOURCE: encourage them to call you as soon as they receive a suspicious message, rather than acting alone; knowing they can ask without being judged protects them a lot. You can also help them SECURE their accounts (passwords, two-factor authentication) and their device, to limit the damage in case of an incident. Finally, raise their awareness without scaring them: the goal is not to frighten them about the internet, but to give them a simple reflex (not to click, verify or call). Repeat the message from time to time, as these scams evolve. In summary, to protect your loved ones: explain to them the existence of these fake package messages, give them a simple rule (never click or pay, call in case of doubt), show them how to verify otherwise, and be their benevolent resource; this prevention, in a few minutes, can save them from serious inconveniences (our guides on accompanying your children on screens, also applicable to the elderly).

What to remember

The package scam is a fake message (SMS or email) claiming to concern a delivery — blocked package, failed delivery, fees to pay, address to confirm — to push you to click, pay, or provide your information. It has become one of the most widespread and effective scams, for a simple reason: it’s perfectly timed. As we order a lot online and often wait for a package, these messages seem plausible, especially when they arrive, by coincidence, right when you’re actually expecting a delivery. Scammers also exploit URGENCY, the careful imitation of real carriers, and the apparent harmlessness of the requested action. The lifesaving reflex, which protects you from almost all of these scams: NEVER click on the link in a package message, and always verify YOURSELF at the source — in your account on the site where you ordered, or on the official carrier’s website (by typing its address yourself). Be as wary as possible of any PAYMENT REQUEST to « unblock » a package: it’s almost certainly a scam; never give your banking details this way. Don’t let the coincidence of expecting a package lull you: it doesn’t make the message legitimate; verify anyway. And rest assured: by ignoring a suspicious message, you’ll never miss a real package (the carrier has other ways to contact you). If you’ve nevertheless fallen for it, react QUICKLY: if you’ve given your banking details or paid, contact your bank without delay; if you’ve entered a password, change it immediately; monitor your accounts and report the scam. Don’t blame yourself: these scams are designed to deceive. Finally, protect your VULNERABLE loved ones (especially the elderly, who are heavily targeted) by passing on the simple rule: never click or pay, and call in case of doubt. Real package tracking never goes through a link that demands payment or your information urgently: keep this principle in mind, always verify at the source, and the package scam will have no hold on you.