Act this weekWhat happenedScammers are sending fake package delivery texts that link to look-alike carrier websites built to steal card numbers and personal details.
Who is affectedAnyone waiting on online orders, especially holiday shoppers, who might get texts posing as USPS, FedEx, UPS or DHL.
What to do- 1Do not tap the link in an unexpected delivery text.
- 2Check your order in the store's account or type the carrier's official web address yourself.
- 3If you entered card details, call your bank right away and ask about a replacement card.
- 4Report the scam to the Federal Trade Commission.
A text says your package could not be delivered because your address is incomplete. It links to a page where you can fix it and pay a small fee, maybe $1.95. It is a scam. The page is built to collect your card number, and the Federal Trade Commission has warned about these messages.
What happened
Scammers send texts that claim an address problem, unpaid postage or a missed delivery. They pose as carriers such as USPS, FedEx, UPS or DHL. The link leads to a copy of a carrier website, with familiar logos, colors and tracking graphics. Some pages show realistic shipment details and ask for your name, address, phone number and payment information.
Why a small fee matters
A $1.95 charge feels harmless when you are waiting on a $200 order. But the payment page can capture your full card number, expiration date, security code and billing address, no matter how small the fee looks. The Consumer Financial Protection Bureau says criminals sometimes test stolen card details with small charges before trying bigger ones.
Who can relax a little
Getting one of these texts right after an order does not mean the store was hacked. Scammers send huge numbers of texts, knowing many people are waiting on packages, especially in busy shopping seasons. Some messages name no retailer or tracking number at all, so the same wording works on anyone. The good timing is usually luck.
What to watch for
- Links with unfamiliar or shortened web addresses
- A familiar name like USPS inside a link that goes to an unrelated site
- A padlock or HTTPS, which only means the connection is encrypted, not that the business is real
- Polished texts with no spelling mistakes, which are becoming more common
What to do
The alert box above lists the steps. The short version: skip the link, check your order through the store or the carrier directly, and call your bank right away if you already entered card details.
What happens next
Expect more of these texts while holiday orders pile up. The wording and the carrier names may change, but the pattern stays the same: a problem that seems urgent, a small payment and a link you did not ask for.
The takeawayNever pay a delivery fee through a text link. Check the order in the store's account or type the carrier's web address yourself.