Why Delivery Scams Are So Effective
Online shopping is so common now that at any given time, many people are actually waiting for a package. This makes fake delivery notifications incredibly effective — even careful people sometimes think "oh, maybe that is my order" and click without thinking.
Scammers know this, which is why delivery scams are one of the highest-volume text scams worldwide. They spike massively during holiday shopping seasons.
Red Flag 1: A Fee Is Required
The most common version claims you need to pay a small fee — usually £1-3 or $2-5 — to release your package, pay customs, or rebook a delivery. The small amount is deliberate: it seems so minor that many people just pay it without thinking.
The goal isn't the small fee itself — it's getting your payment card details. Once you enter them on the fake website, the scammer has your full card number, expiry date, and security code.
Legitimate delivery companies do sometimes charge customs fees, but they handle this through official channels and their own app or website — never through a random text link. Royal Mail, USPS, and DHL all have official customs payment processes.
Red Flag 2: A Suspicious Link
The link in a fake delivery text almost never matches the real company's website. Instead of "usps.com" or "royalmail.com," you'll see something like:
Always look at the main domain — that's the part right before the .com, .co.uk, etc. In "tracking.usps.com," the main domain is usps.com (legitimate). In "usps.tracking-service.com," the main domain is tracking-service.com (fake).
- usps-redelivery.com or usps-tracking.xyz — the real USPS only uses usps.com
- royalmail-fee.co.uk or royal-mail-delivery.com — real Royal Mail only uses royalmail.com
- dhl-parcel.delivery-update.com — the main domain is "delivery-update.com," not dhl.com
- A string of random characters or numbers
- A URL shortener like bit.ly that hides the real destination
Red Flag 3: No Tracking Number or Order Reference
Real delivery notifications from real companies include specific details: a tracking number, an order number, or at least a reference to what you ordered. Scam texts are vague because they're sent to millions of people at once.
If a text says "your package" without mentioning what it is, who sent it, or providing a trackable reference number, be suspicious.
Red Flag 4: You Didn't Order Anything
This seems obvious, but in the moment, people often think "maybe someone sent me a gift" or "maybe I forgot I ordered something." Scammers rely on this hesitation.
If you're not expecting a package and you receive a delivery notification, it's almost certainly a scam. Delete it.
How to Track a Real Package
If you are expecting a delivery and want to check its status:
- Go to the delivery company's official website or app directly — don't use any link from a text.
- Use the tracking number from your original order confirmation email.
- If you ordered from Amazon, check the Amazon app or website directly.
- If you ordered from a store, check the order status on that store's website.