Suspicious delivery message? Start with what it asked you to do.
Delivery scams often look like package tracking updates, missed delivery notices, redelivery fees, address problems, customs charges, or courier messages. The risk depends on whether you only received it, clicked a link, entered payment details, updated an address, or downloaded something.
By ScamClarity Editorial Team
Reviewed by ScamClarity Safety Review
Published May 21, 2026 ยท Updated May 21, 2026
A delivery scam usually makes a normal package issue feel urgent: a missed delivery, address problem, tracking update, customs fee, redelivery fee, postage due, or package hold. The message wants you to click, pay, enter card details, update personal information, download something, or call a number before you verify the delivery another way.
A real package delay can happen. A real carrier or retailer may send delivery updates. The risk comes from what the message asked you to do and what happened after you opened it.
Start with what the message asked for
Use the closest match. If more than one applies, start with the request involving payment, card details, login information, one-time codes, downloads, or a phone call.
It only asked me to click a tracking link
Check closely
A tracking link is not proof that the message is real. Scam delivery texts and emails often send you to a lookalike carrier page.
Do not use the message link to check the package. Open the official carrier app, carrier website, or retailer order page yourself.
Compare the tracking number, sender, order, and carrier outside the message.
Be careful with shortened links, misspelled carrier names, or links that contain the carrier name but end on another domain.
Do not: Do not keep tapping the link to see if it becomes clearer or more real.
It said my package could not be delivered
Check closely
Missed delivery messages are common scam lures because they sound routine and time-sensitive.
Check the package through the real carrier or retailer. A real tracking page should match an order, sender, destination, and status you recognize.
Look for vague wording with no sender, order, or real tracking context.
If you were not expecting a package, treat the message as more suspicious.
Do not: Do not call a number from the suspicious notice to reschedule delivery.
It asked me to update my address
Check closely
A fake address update can collect your name, address, phone, email, and sometimes card details under the cover of fixing delivery.
Use the official carrier or retailer account to check whether an address issue exists. If there is no matching order or tracking status, do not submit the form.
Watch for forms that ask for more than the delivery problem would require.
If you already submitted address or contact details, expect more targeted follow-up messages.
Do not: Do not enter personal information into a form opened from an unexpected delivery message.
It asked for a small redelivery fee
Act quickly
A tiny fee can be bait for the card number, expiration date, CVV, billing address, and phone number.
Do not pay through the message link. For USPS specifically, redelivery is not charged. For other carriers, check fees only through the official carrier site, app, or account.
A small amount can still expose a payment card.
A fake payment page may say the card failed so you try multiple cards.
Do not: Do not assume a request is safe because the amount is only a few cents or a few dollars.
It asked for card, bank, or login details
Act quickly
This is higher risk than a message you ignored. The next step depends on whether you entered a card, bank login, account password, or one-time code.
Contact the card issuer, bank, payment provider, or account provider through official channels if any details were submitted.
Card details: ask about replacement, pending charges, disputes, and monitoring.
Bank or account login: change the password from the real site and review recent sign-ins.
One-time code: treat it as possible approval of a login, account change, or payment.
Do not: Do not share another code with anyone who texts or calls after the delivery message.
It asked for customs, postage, or release payment
Check closely
Customs, duties, taxes, and postage can be real in some deliveries, but scam messages use the same words to push you into a fake payment page.
Check the fee through the official carrier, retailer, marketplace order, or customs broker contact you can verify independently.
A real fee should connect to a real shipment you recognize.
Be more careful if the message gives no sender, no order, no real tracking detail, or only a countdown.
Do not: Do not enter card or bank details through a customs link from an unexpected text or email.
It asked me to download an app or file
Act quickly
Delivery tracking should not require an app, file, configuration profile, browser extension, or permission from a random message link.
Do not install it. If you already installed something, remove unknown apps or profiles and review account sign-ins, browser permissions, and payment activity.
On iPhone, check for configuration profile or calendar prompts if one appeared.
On Android, check for APK installs, notification permissions, browser downloads, and unknown apps.
Do not: Do not approve a download because the page says it is required to see the tracking update.
It told me to call a number
Check closely
A fake delivery number can lead to someone asking for card details, identity information, remote access, or a one-time code.
Look up the carrier, retailer, or marketplace support number yourself. If you called and shared information, act based on what you shared.
Save the number, voicemail, call time, and what was requested.
If they asked for a code, password, or card number, treat that as exposed.
Do not: Do not call back through the number in the suspicious text, email, voicemail, or door notice.
I clicked but entered nothing
Check closely
A click is not the same as submitting a card number, password, code, or address. The useful question is what loaded and whether anything was installed, downloaded, approved, or entered.
Close the page, do not open it again, and check for downloads, install prompts, profile prompts, browser permissions, or account alerts.
If the page did not load, do not keep testing it.
If the page asked for payment, login, or address details and you entered nothing, the risk is different from submitting the form.
Do not: Do not assume one tap proves your phone is hacked, but do not ignore downloads, prompts, or account changes.
I entered payment or personal information
Urgent
The response depends on what was entered. A card number, bank login, account password, one-time code, SSN, or ID image needs faster action than name and address alone.
Contact the relevant provider, save evidence, monitor for follow-up messages, and use official reporting options.
Payment card: contact the issuer quickly.
Bank details: contact the bank through the official app, card, statement, or website.
Identity details: use identity-theft resources if sensitive information may be misused.
Do not: Do not pay another fee to cancel, refund, release, or recover the first payment.
Fake delivery texts versus real delivery notices
Real delivery notices usually connect to something you can verify outside the message: an order you placed, a tracking number that works on the official carrier site, a retailer order page, or a delivery app notification you already use. A suspicious notice tries to make the link in the message feel like the only way to fix the problem.
The safest check is boring but reliable. Do not use the text or email link as the test. Type the carrier site yourself, open the real carrier app, open the retailer account, or use a saved bookmark. If the message claims to be from USPS, FedEx, UPS, DHL, Amazon, or a local courier, verify through that real account or site rather than through the link.
Do not use a message link to prove the message is real.
Do not call a number from a suspicious delivery message.
Be careful with shortened links, extra words around a brand name, and domains that look close but are not the carrier's real domain.
A real-looking logo, tracking number, or urgency countdown does not prove the notice is real.
If you are expecting a package, check the retailer order page and carrier tracking separately.
Redelivery fees, address updates, customs charges, and small payments
This is the strongest part of many delivery scams. The request feels small and normal: pay $0.30, $1.99, $4.96, or another low amount to release or reschedule a package. The fee is not the main prize. The payment form can collect your card number, billing address, phone, email, and sometimes enough information to try follow-up charges or account access.
Address-update pages work the same way. They make the form sound like a delivery fix, then collect contact information that can make later texts, calls, and emails sound more personal. Customs and postage claims need extra care because legitimate duties, taxes, or postage due can exist. The safer question is whether the fee appears in the official carrier, retailer, marketplace, or customs process you reached yourself.
What the message asked for
Request
Why scammers use it
Safer check
Redelivery fee
A small amount lowers your guard while collecting card details.
Check official carrier tracking or your retailer order page. USPS redelivery is not charged.
Address update
The form can collect name, address, phone, email, and sometimes payment details.
Use the carrier or retailer account you open yourself.
Customs, duties, taxes, or postage
The words can sound normal for international or special shipments.
Verify through the official carrier, retailer, marketplace, or customs broker.
Card verification
A fake payment page can capture card number, expiration date, CVV, and billing address.
Do not enter card details from a message link. Contact the card issuer if submitted.
Package held or delayed
A hold or deadline creates pressure to act before checking.
Look for a real tracking status on the official site or app.
A small fee is not proof of safety. It may be the easiest way to collect a valuable payment card.
If you clicked the delivery link
A common fear is that clicking one fake delivery link automatically means the phone or computer is compromised. That is not the right assumption. A link can be risky, and some pages can try to download files or push app/profile prompts, but many delivery scams still depend on the next action: typing information, paying, logging in, approving a code, or installing something.
Think through what happened, then act on that. Did the page load? Did it ask for card details, address, login, or a one-time code? Did it say the payment failed? Did it ask you to download an app, install a profile, open a file, allow notifications, or call a number?
Clicked and page did not load: close it, do not test it again, and save the message if you plan to report it.
Clicked and entered nothing: check for downloads, prompts, browser permissions, or account alerts, then verify the package outside the message.
Clicked and typed but did not submit: treat the information as possibly exposed if the page may have captured it as you typed or through autofill.
Clicked and downloaded something: do not open it again; remove unknown apps, files, profiles, extensions, or permissions.
Clicked and called a number from the page: write down what was said and act based on any information or code you shared.
If your concern is mainly about whether your phone, app, browser, or account changed after the click, the ScamClarity page on phone and account compromise concerns can help separate a normal browser scare from a real account or device issue.
If you entered card, address, login, or personal information
The response changes with the information entered. A name, address, phone number, and email can lead to more believable follow-up scams. A card number or bank login needs financial action. A password or one-time code points to account security. SSN, ID images, date of birth, or tax details create identity-risk concerns.
Card number, expiration date, CVV, or billing address: contact the card issuer quickly and ask about replacement, pending charges, disputes, and monitoring.
Bank account or bank login: contact the bank through the official app, website, card, statement, or known phone number.
Delivery account, Amazon account, email account, Apple ID, Google account, or Microsoft login: change the password from the real site and review recent sign-ins, recovery details, and connected devices.
One-time code: treat it as possible approval of a login, password reset, account change, phone-number transfer, or payment.
Name, address, phone, and email only: watch for follow-up messages that mention the same package, carrier, address, or fee.
SSN, ID image, date of birth, or other sensitive identity details: use official identity-theft resources if misuse is suspected or starts appearing.
A tracking number can look convincing and still not prove the message is real. It may be fake, copied from another shipment, expired, unrelated to you, or real but paired with a scam link. Some scams use a real carrier name and a vague tracking-like number to make the message feel specific.
Check the tracking number only on the official carrier site or app. Then compare the carrier, sender, destination, order number, purchase date, and delivery status against the retailer or marketplace account you used. If the message arrived when you were not expecting a package, or if it names no real sender or order, treat it more carefully.
A real tracking result should match a shipment you recognize.
A tracking number that works but belongs to another destination, sender, or old shipment does not validate the message link.
If the order came from a marketplace seller, verify through the marketplace order page rather than the seller's text link.
If the message says Amazon, check your Amazon order history directly rather than entering information from the text.
If a seller uses a tracking number to pressure you into off-platform payment, pause and verify the order separately.
What not to do now
Avoid these next moves
These are the points where a suspicious delivery message can turn into card fraud, identity exposure, or account access.
Do not keep tapping the link
Testing the link again rarely helps and can expose you to more redirects, prompts, or downloads.
Do not enter card or bank details through the message
Use the official carrier, retailer, marketplace, bank, or card issuer site you open yourself.
Do not call the number in the suspicious message
Look up the official support number or use the app/account you already trust.
Do not download an app or file
Package tracking should not require a random app, file, profile, extension, or browser permission from a text or email link.
Do not share one-time codes
A code can approve a login, reset, payment, phone transfer, or account change.
Do not assume a small fee is safe
The fee may be small because the card and personal details are the real target.
Do not delete evidence before saving it
Save enough detail before blocking, deleting, or reporting the message.
What to save
Save evidence before deleting the message if you can do that safely. A clear record helps the carrier, card issuer, bank, platform, FTC, IC3, FCC, USPIS, or local police understand what happened.
Delivery scam evidence checklist
Save the details that apply to your situation.
The message
Screenshot the text, email, QR notice, door notice, voicemail, or call log, including date and time.
Sender details
Save the phone number, short code, email address, sender name, or caller ID shown.
Link or QR details
Save the visible URL if you can do so without opening it again. For a QR code, save a photo of the notice.
Package details
Save the carrier name used, tracking number, order number, sender name, and delivery claim.
What you did
Write down whether you clicked, scanned, replied, called, typed, submitted, paid, downloaded, or approved a prompt.
Payment and account records
Keep receipts, transaction IDs, card or bank alerts, account security emails, and screenshots of any fake page.
Follow-up messages
Save later texts, calls, emails, or voicemails that refer to the same package, fee, address, or payment.
Do not post full card numbers, SSNs, passwords, one-time codes, ID images, or private account screenshots in public forums.
Where to report or act
ScamClarity is not an official reporting destination. Report in the places that can act on the message, payment, account, or impersonation.
Use your phone or email app's report junk, report spam, or block option when available.
Forward scam texts to 7726, which spells SPAM, when your carrier supports it.
For USPS-related package smishing, follow USPIS reporting steps and include the message, sender, date, screenshot, and what happened.
Report consumer fraud to FTC ReportFraud.
Report internet-enabled fraud, losses, or account compromise to IC3.
Report unwanted calls or texts through the FCC complaint center when appropriate.
Report impersonated carriers through official carrier channels when available, such as FedEx, UPS, or DHL fraud reporting pages.
Contact the card issuer, bank, payment provider, retailer, marketplace, account provider, or carrier through official channels if payment or account information was entered.
For U.S.-specific reporting context, the ScamClarity United States scam reporting page explains how FTC, IC3, IdentityTheft.gov, local police, and providers fit together.
How this overlaps with smishing and phishing
Delivery scams often arrive by text, email, QR code, voicemail, or a fake tracking page. If it came by text, it is also a smishing situation. If it came by email, link, QR code, or fake login page, it also overlaps with phishing. This page focuses on the delivery-specific clues: redelivery fees, address fixes, customs claims, package holds, fake tracking, and carrier impersonation.
Use the broader smishing page if the main issue is a text-message link, reply, 7726 reporting, or phone-specific concern. Use the broader phishing page if the main issue is a suspicious email, attachment, login page, QR code, or link across channels.
Official sources used
These sources support the practical steps in this article. They are listed by purpose rather than as a long reference dump.
Official links
Use the official source that matches the carrier, reporting need, or information exposure.
Checking through known websites and phone numbers, what to do after responding, IdentityTheft.gov context, security software after downloads, and phishing reporting.
Phishing recognition across emails, texts, phone calls, and direct messages, including harmful links, attachments, shortened URLs, and requests for financial information.
FAQ
How can I tell if a delivery text is fake?
Treat it as suspicious if it is unexpected, pushes you to use a link, asks for a redelivery fee, asks for card or bank details, asks for an address update, uses a shortened or strange URL, gives no real sender or order context, or pressures you with a deadline. Check the package through the official carrier or retailer, not through the message.
What if I clicked a fake delivery link but entered nothing?
Close the page and do not open it again. Check whether anything downloaded, whether a profile or app prompt appeared, whether browser permissions were allowed, or whether any account alerts appeared. A click alone is different from submitting a card number, password, code, or personal information.
What if I entered my card number for a redelivery fee?
Contact the card issuer quickly using the number on the card, the official app, or the official website. Ask about card replacement, pending charges, disputes, monitoring, and whether any attempted recurring charges or authorization holds appear.
Is a small delivery fee always a scam?
No. Some shipping, customs, duties, taxes, or postage charges can be real in specific situations. The unsafe part is paying through an unexpected message link. Verify fees through the official carrier, retailer, marketplace order, or customs process you reach yourself.
Should I call the number in a delivery text?
No, not if the message is suspicious. Look up the official carrier, retailer, marketplace, bank, or card issuer contact information yourself. A fake number can lead to someone asking for card details, login information, remote access, or one-time codes.
What if the tracking number looks real?
Check it only through the official carrier site or app. A tracking number can be fake, copied, expired, unrelated, or attached to a real shipment that is not yours. Compare it with your retailer order page, sender, destination, and expected delivery.
How do I report a fake delivery text?
Use your phone's report junk or spam option, forward the text to 7726 when your carrier supports it, and report consumer fraud to FTC ReportFraud. For USPS-related package smishing, follow USPIS reporting steps. Use IC3 for internet-enabled fraud, losses, or account compromise.
Is this the same as smishing?
If the delivery scam came by text message, yes, it is a form of smishing. If it came by email, QR code, fake website, voicemail, or app message, it may be phishing, vishing, or another impersonation pattern. The delivery-specific risk is what the notice asked you to click, pay, update, download, or share.