Undeliverable Package Scams

What is a "Undeliverable Package" Scam?

An undeliverable package scam is a delivery-related phishing scam where criminals pretend that a package cannot be delivered because of a missing address, unpaid fee, customs issue, or failed delivery attempt. The message usually creates urgency by saying the package will be returned, held, delayed, or destroyed unless the recipient takes immediate action. Victims are directed to click a link, confirm delivery details, or pay a small redelivery fee. The link often leads to a fake website designed to look like USPS, UPS, FedEx, DHL, Amazon, or another delivery service. Once the victim enters information, scammers may steal payment card details, login credentials, addresses, phone numbers, or other personal information. Some versions also install malware or lead to follow-up fraud using the information already collected.

How the Scammers Target New Victims:

Scammers usually contact victims by text message, email, robocall, or messaging app notification. Text messages are common because they can look like quick delivery alerts and often include a shortened link. Emails may copy shipping logos, tracking language, barcodes, fake tracking numbers, and delivery-status formatting. Some messages are sent during busy shopping periods when people are more likely to be expecting packages. The scam does not require the victim to actually have a package in transit, since scammers send the same message to large numbers of people and rely on coincidence.

Who the Scammers Impersonate:

Undeliverable Package scammers may impersonate:

• USPS
• UPS
• FedEx
• DHL
• Amazon
• Walmart, Target, or other online retailers
• Customs or border authorities
• Local courier or same-day delivery companies
• Postal notification services

How to Spot a "Undeliverable Package" Scam:

What the Scammers Say (Scam Narratives / Fake Storylines):

Scammers often claim that a package cannot be delivered because the address is incomplete, the street number is missing, the ZIP code is wrong, or the recipient was not available. They may say a small redelivery, customs, postage, or storage fee must be paid before delivery can continue. Some messages warn that the package will be returned to sender, suspended, destroyed, or held at a facility unless the recipient acts within a short deadline. Others claim there is a tracking update, failed delivery notice, final reminder, or delivery exception. The wording is usually vague because the scammers do not know what the victim ordered.

Information the Scammers Ask For:

These scammers may ask victims to enter their full name, delivery address, phone number, email address, date of birth, payment card number, card expiration date, CVV, billing address, online account login, one-time passcode, or banking information. They may ask for a small payment to make the request seem routine and low risk. In some cases, the fake site asks the victim to create an account, verify identity, or download a delivery app. The real goal is usually to collect information that can be used for card fraud, account takeover, identity theft, or future targeted scams.

Scam Warning Signs and Red Flags:

Warning signs include unexpected delivery messages, vague package details, pressure to act immediately, misspellings, strange sender addresses, shortened links, unfamiliar domains, and requests for payment through a link in a text or email. A message is suspicious if it does not include a valid tracking number or if the tracking number does not work on the carrier's official website. Scammers often use web addresses that look similar to real carrier names but include extra words, numbers, hyphens, or unusual endings. Real delivery companies generally do not require sensitive personal or payment information through an unsolicited text link. Any request for a one-time passcode, account password, or card details should be treated as a serious red flag.

Victim Experiences and Scam Reports:

Victims often report receiving a text or email saying their package could not be delivered due to an address problem or unpaid fee. Many realize something is wrong only after entering card information on a fake delivery website or seeing unauthorized charges. Some victims report that the scam site looked professional and closely copied the branding of a real postal or shipping company. Others say the scam arrived when they were already waiting for an order, which made the message seem believable. After responding, victims may receive additional scam messages, fake bank calls, or attempts to obtain one-time passcodes connected to their payment card or online accounts.

Protect Yourself from "Undeliverable Package" Scams:

Dangerous Actions to Avoid:

Do not click delivery links in unexpected texts or emails. Do not enter payment card numbers, passwords, one-time passcodes, Social Security numbers, or banking details on a website opened from an unsolicited delivery message. Do not pay redelivery, customs, postage, or storage fees through a link unless you have verified the request directly through the carrier's official website or app. Do not download apps or files from delivery messages. Do not reply with personal information, and do not call phone numbers listed inside suspicious messages.

Best Practices to Stay Safe:

Track packages by going directly to the official carrier or retailer website, using a saved app, typed web address, or confirmed order email. Compare any tracking number in the message with the tracking number from the original retailer or carrier. Check the sender address, domain name, and link carefully before taking any action. Use payment card alerts and monitor accounts for unauthorized charges after any suspicious interaction. If you entered card information, contact the card issuer immediately, cancel or replace the card if needed, and watch for follow-up scams. Report suspicious delivery texts by forwarding them to 7726 when available, and report fake emails or websites to the impersonated company.

Key Takeaways to Stay Safe:

Undeliverable package scams rely on urgency, coincidence, and fake delivery branding. Treat unexpected delivery problem messages as suspicious, especially when they ask you to click a link or pay a small fee. Use official carrier websites or apps instead of links in texts or emails. Never share passwords, one-time passcodes, or payment details through an unsolicited delivery notice. When in doubt, verify the shipment directly with the retailer or carrier before responding.