Scam Spotlight: Fake Package Delivery Notifications

Scam Spotlight: Fake Package Delivery Notifications

Part of our Scam Spotlight series — plain-language breakdowns of specific phishing and scam patterns we see, building on our Understanding Spam and Phishing Emails (Basics) article.

What this scam looks like

You get an email or text message claiming to be from a shipping carrier (USPS, UPS, FedEx, DHL) or a retailer, saying a package couldn't be delivered, is being held at customs, or needs an address confirmation or small fee before it can ship. It includes a tracking number and a link to “reschedule delivery” or “pay a redelivery fee.” These are especially common around holidays and major shopping events.

A typical example

Subject: Your package could not be delivered
From: USPS Delivery <usps-tracking@usps-redelivery.com>

We attempted to deliver your package (Tracking #: 9274 8891 0234) but were unable to due to an incomplete address. A redelivery fee of $1.99 is required to reschedule.

[ Confirm Address & Pay Fee ]

Red flags in this example

  • A sender domain that isn't the carrier's real domain (e.g. “usps-redelivery.com” instead of usps.com).

  • A small, easy-to-dismiss fee. Scammers ask for a tiny amount specifically because it feels too small to worry about — but it's really just there to capture your card details.

  • You may not even be expecting a package, or the tracking number doesn't match anything you ordered.

  • Real carriers generally don't charge a fee by email link to redeliver a package that's already in their system.

  • The link goes to a page asking for a full card number and personal details rather than the carrier's actual tracking site.

What to do if you receive this

  1. Don't click the link or enter any payment information.

  2. Track any real packages directly on the carrier's official website or app, using a tracking number from your actual order confirmation.

  3. If you're not expecting any package, treat the message as fake and delete it.

  4. Report it to the carrier if possible (most have a dedicated phishing-report email address on their website) and mark it as spam in your inbox.

What to do if you already responded

If you entered card details on a fake delivery page:

  1. Contact your bank or card issuer right away to flag the charge and consider requesting a new card number.

  2. Watch your statement closely for any additional unauthorized charges.

  3. If you also entered an email password anywhere on that page, change it immediately — see How Do I Change My Email Password?

  • Understanding Spam and Phishing Emails (Basics)

  • Scam Spotlight: Fake Invoice and Payment Emails

  • Scam Spotlight: Gift Card Request Scams


    • Related Articles

    • Scam Spotlight: Gift Card Request Scams

      Part of our Scam Spotlight series — plain-language breakdowns of specific phishing and scam patterns we see, building on our Understanding Spam and Phishing Emails (Basics) article. What this scam looks like Someone claiming to be a boss, coworker, ...

    • Scam Spotlight: Fake "Verify Your Account" Emails

      Part of our Scam Spotlight series — plain-language breakdowns of specific phishing and scam patterns we see, building on our Understanding Spam and Phishing Emails (Basics) article. What this scam looks like You get an email that looks like it's from ...

    • Scam Spotlight: Fake Invoice and Payment Emails

      Part of our Scam Spotlight series — plain-language breakdowns of specific phishing and scam patterns we see, building on our Understanding Spam and Phishing Emails (Basics) article. What this scam looks like You receive what looks like a routine ...

    • Scam Spotlight: 'CEO Fraud' Wire Transfer Requests

      Part of our Scam Spotlight series — plain-language breakdowns of specific phishing and scam patterns we see, building on our Understanding Spam and Phishing Emails (Basics) article. What this scam looks like You get an email that appears to be from ...

    • Scam Spotlight: Tech Support Scam Pop-Ups and Calls

      Part of our Scam Spotlight series — plain-language breakdowns of specific phishing and scam patterns we see, building on our Understanding Spam and Phishing Emails (Basics) article. What this scam looks like A pop-up suddenly fills your screen — ...