Right now, you're probably waiting on more packages than you can keep track of. Gifts for family, a few things for yourself, maybe a surprise or two shipped straight to someone else's door. So when an email or text shows up saying "We couldn't deliver your parcel. Pay a small fee to reschedule," it doesn't feel suspicious. It feels like one more thing on the to-do list.
That's exactly what scammers are counting on. The good news is that this scam is easy to beat once you know what to look for. In the next few minutes, you'll learn how the fake delivery message works, the red flags that give it away, and a simple routine for checking any delivery notice safely. You'll also find out what to do if you've already clicked.
What Is the Fake Delivery Scam?
This is a type of phishing, a fancy word for a message that pretends to come from a company you trust in order to trick you into giving up information or clicking something harmful. When it arrives as a text message, it's sometimes called smishing (SMS + phishing). It's the same trick through a different door.
The fake delivery version usually goes like this:
- You get an email or text claiming to be from a courier or postal service.
- It says there's a problem: a missed delivery, an incomplete address, a customs fee, a package "on hold."
- It includes a link or button to "fix" the issue.
- The link leads to a website built to look like the real thing, where you're asked for personal details, a card number, or your account login.
Sometimes the link does something sneakier: it quietly installs malware, which is software designed to spy on you or damage your device.
The small fee is a clever touch. Two dollars feels harmless, so people don't stop to think. But the scammers don't care about two dollars. They want your card details, which they can use or sell.
Why Scammers Love the Holidays
Scammers aren't creative so much as opportunistic. December hands them several advantages:
- Everyone is expecting packages. In March, a surprise delivery notice might make you pause. In December, it feels completely normal.
- We're busy and distracted. Between shopping, work deadlines, and family plans, we're clicking faster and thinking less.
- Deadlines feel real. Gifts need to arrive by a certain date, so "act within 24 hours" hits a nerve.
- We lose track of orders. Some gifts are shipped straight to relatives, and others are surprises sent to us. It's easy to think, "Maybe that's the thing I forgot about."
- It's a numbers game. Scammers send messages to enormous lists of people. They only need a small fraction to respond.
The Red Flags: How to Spot a Fake
No single sign proves a message is fake, but the more of these you notice, the more suspicious you should be.
- It creates panic. Phrases like "final notice," "act now," or "package will be destroyed" are designed to make you react before you think. Real companies do send reminders, but they rarely threaten you.
- It's vague. A real notification usually includes specifics like your name, an order number, or the store you bought from. Scam messages tend to say things like "Dear customer" or "your parcel" without saying which one.
- The sender looks off. Check the email address, especially the part after the "@" sign, known as the domain. Scammers use lookalikes, such as a real company's name with extra words or a swapped letter. For texts, be wary of random personal-looking phone numbers.
- The link is strange. Preview a link before you tap it: hover over it on a computer, or press and hold on a phone. If the web address looks jumbled, is oddly long, or doesn't match the company's name, don't click.
- It asks for money or sensitive details. Be extra careful if a message wants a fee, card number, or password through a link. One caveat: real customs or delivery fees do exist, especially for international orders. That's why the next section matters. Check through official channels rather than the message itself.
- It's from a company you've never used. If you've never dealt with that courier, that's a clue. Still, be careful: scammers often pick big, well-known names because you probably have dealt with them.
- Spelling and design mistakes. Typos, odd grammar, and blurry logos are classic signs. But don't rely on them. Scam messages are getting more polished, and a clean-looking email isn't proof of safety.
What to Do the Moment One Lands in Your Inbox
Here's a simple routine you can run in under two minutes:
Step 1: Pause. Take one breath before you touch anything. The whole scam depends on you acting quickly.
Step 2: Don't click, reply, or call. Leave the link alone. Don't reply "STOP" to a suspicious text either, since that can confirm your number is active. And don't call any phone number listed in the message, as it may connect you to the scammers.
Step 3: Check your orders. Ask yourself: am I actually expecting something? Open the store's official app or type the website address yourself, then look at your order status there. Order confirmation emails from stores are also a good place to find tracking numbers.
Step 4: Go to the courier directly. Type the courier's official website into your browser, or use their official app, and enter your tracking number there. If there's a real problem with your package, it will show up. If there's nothing, you've just dodged a scam.
Step 5: Report it. Most email apps have a "Report phishing" or "Report spam" button, so use it. That helps protect other people too. Many countries also have official places to report fraud. [placeholder: insert your country's fraud reporting agency or website, plus the number for forwarding scam texts, if one exists]
Step 6: Delete it. Once you've reported it, get it out of your inbox so no one in your household taps it by accident.
What If You Already Clicked?
First, don't beat yourself up. These messages are designed by professionals to fool smart, careful people. What matters is what you do next, and acting quickly makes a big difference.
- If you only clicked the link: Close the page and don't enter anything. Run a security scan on your device and keep an eye on your accounts over the next few weeks.
- If you entered card details: Call your bank or card provider right away, using the number on the back of your card. Ask them to block or replace the card and to review any suspicious charges.
- If you entered a password: Change it immediately on that account, and on any other account where you use the same one. Then turn on two-factor authentication if it's available. That's an extra security step, like a code sent to your phone, so a stolen password alone isn't enough to get in.
- If you shared personal details like your date of birth or an ID number: Watch for follow-up scams, and consider placing a fraud alert with your credit bureau.
- If you downloaded a file or app: Disconnect the device from the internet, run an antivirus scan, and change your important passwords from a different, clean device. If you're unsure, ask a tech-savvy friend or a professional for help.
And tell someone. Scammers rely on embarrassment to keep victims quiet. Reporting helps you and helps others.
Habits That Keep You Safe All Season
You don't need to become a security expert. A few small habits go a long way:
- Keep a simple order list. A note on your phone with what you ordered, from where, and the expected date makes fake notices much easier to spot.
- Save tracking links from the store. Use the ones in your order confirmation emails, not ones that arrive out of nowhere.
- Use your official apps. Store and courier apps can send genuine delivery updates, so you don't need to trust random messages.
- Consider paying with a credit card. Credit cards often offer stronger fraud protection than debit cards, though the details vary by provider, so check your card's terms.
- Turn on transaction alerts. A text or notification for every purchase helps you catch problems fast.
- Keep your devices updated. Software updates fix security holes that scammers try to exploit.
Look Out for the People You Love
Scammers don't just target the tech-savvy. They go after busy parents, older relatives, teenagers with their first debit cards, and anyone shopping online for the first time.
Consider setting a simple family rule: "If a message says a package is stuck, we check together before we click." No embarrassment, no judgment. Just a quick "Hey, does this look weird to you?" can stop a scam in its tracks. If you have a relative who isn't comfortable with technology, a five-minute chat now could save them a lot of stress later.
Your Three-Minute Action Plan
Before the next delivery notice shows up, do these three things today:
- Share this post with at least one person, ideally someone who might not think twice before tapping a link.
- Bookmark the official tracking pages of the couriers you use most, so you never need to rely on a link in a message.
- Turn on two-factor authentication for your email and your main shopping accounts. It's one of the strongest protections you can add.
The holidays should be about the gifts, the gatherings, and the people you're doing it all for, not about sorting out a stolen card. When in doubt, close the message, go straight to the source, and trust your gut. A real package will wait. A scam depends on you not doing so.
Stay safe, and happy holidays.
