Typical red flags
Delivery scams work because many people are expecting packages.
- The link domain is not the carrier's official domain.
- A small redelivery, customs, address, or postage fee is requested by card.
- The message arrives from a random number or strange email address.
- The tracking number is missing, generic, or not recognized on the official site.
- The page asks for full card details, ID, account login, or one-time codes.
- The message threatens immediate return, storage fees, or package loss.
- The link is shortened or uses odd country domains and extra hyphens.
What to do if you already fell for it
Treat card entry on a fake delivery page as card exposure.
- Contact your card issuer immediately if you entered payment details.
- Freeze or replace the card if the bank recommends it.
- Change passwords if you entered account login information.
- Save the SMS, email, URL, screenshots, and payment receipts.
- Report the message to the carrier and your phone provider.
- Use the official carrier website or app to check real tracking status.
- Watch for follow-up bank or delivery impersonation messages.
Example: fake USPS redelivery fee
Input
Your package could not be delivered. Confirm your details and pay a $1.99 redelivery fee.
What to notice
- The message asks for card payment through a link.
- The domain is not clearly the official carrier domain.
- Small fees are commonly used to steal full card details.
Package delivery scam FAQ
Can delivery companies send real SMS updates?
Yes, but you should verify through the official carrier website or app instead of following a suspicious link.
Why do fake delivery pages ask for tiny payments?
A small fee feels believable and gets victims to enter full card details, which can later be used for larger fraud.
What if I was expecting a package?
Use the tracking number on the merchant receipt or the carrier's official site. Do not trust a random link just because you expect a delivery.
What should I paste into ScamSpot?
Paste the delivery message, tracking link, fee request, or customs notice. Remove real address or card details first.