Act this weekWhat happenedFake texts claiming to be from FedEx say a package could not be delivered and push people to tap a link to pay a fee or confirm details.
Who is affectedAnyone with a mobile number, on iPhone or Android, whether or not they use FedEx or are expecting a parcel.
What to do- 1Do not tap the link, reply, or call any number in the text.
- 2Forward the text to 7726, then delete it.
- 3Look up your parcel by typing fedex.com or using the FedEx app.
- 4If you already entered card details, call your bank and change any password you shared.
A text says a FedEx package could not be delivered and asks you to tap a link to pay a small fee or confirm details. The message is fake. The link opens a page run by scammers, not by FedEx, and that page collects card numbers, logins and personal details.
What happened
Security people call this smishing, which is phishing by text message. The text does not need to match a real parcel. It goes out to huge lists of numbers, and the sender counts on the fact that many people are waiting for something from some shop. Whoever is expecting a delivery taps without thinking.
FedEx has warned about this pattern before. In January 2020, local news stations reported police and FedEx warnings about texts with a fake tracking code and a link to set delivery preferences. A security vendor article from July 2026 describes the same pattern today, with claims of an incomplete address or an unpaid fee.
Who can relax
The text itself is not a virus, and it does not mean your phone is hacked or that FedEx lost your data. You got it because your number is on a list, not because you did something wrong. Numbers are guessed in sequence, bought, or taken from old data leaks. Even a message that uses your name proves nothing. It may only mean the sender has data from a leak or a shop.
What to watch for
- A claim of an incomplete address, a missed delivery or an unpaid fee.
- A tracking code you do not recognize, or a parcel you are not expecting.
- Any request for money, a card or a password to release a package.
- A link that is not on fedex.com.
A real FedEx text is about a shipment you know about and names no payment. Even then, the safest move is to ignore the link and look the parcel up yourself. FedEx's 2020 warning, as reported by ABC stations, says it does not send unsolicited texts or emails asking for money, package or personal information.
What to do
The steps are in the alert box above. In short: do not tap, reply or call, report the text, and check any real parcel on fedex.com or in the FedEx app by typing the address yourself. Replying, even with STOP, is not advised.
What is not known
The check behind this report could not read FedEx's current fraud page, which refused the request. The FedEx statements come from its public warnings as reported by news outlets. For FedEx's present wording, call 1.800.463.3339 or visit fedex.com. A figure in the vendor article, which ranks delivery problems at the top of text scams in 2024 per the FTC, was not checked against FTC data. No scam link was opened, and no reports from affected users were found.
The takeawayNever tap a delivery link in a text you did not expect. Type fedex.com yourself to check a parcel, then report the text to 7726 and delete it.