UPS delivery scam texts and emails: how to spot the fake
Quick answer
A text or email that says UPS has a package for you and asks you to click a link to update delivery details is a scam if you weren't expecting a delivery. The FTC says there is no package. Don't click. Check tracking on UPS's own website or app.
- Pretends to be
- UPS
- Last updated
How it works
Scammers pretend to be UPS (or FedEx, USPS and other carriers). The message says a package can't be delivered, or that you need to update your shipping preferences, and gives a link.
The FTC says there is no package: the aim is to phish for your information. The link leads to a page built to look like the carrier's site, where you're asked for personal or card details.
UPS is the company being impersonated here. It isn't behind the messages.
Red flags
- A delivery message when you aren't expecting a package
- A link to "update shipping preferences" or fix a delivery problem
- Pressure to act quickly or the package is returned
- A sender that is a random phone number or personal email address
- A website address that isn't the carrier's own
Example message
UPS: Your package was not delivered because the address is incomplete. Update your delivery details here within 24 hours or it will be returned: [link]
What to do
- 1
Don't click or reply
Delete the message. Replying, even with STOP, can confirm your number is active.
- 2
Check on the carrier's own site
If you are waiting for a parcel, open the carrier's official website or app yourself and enter your tracking number. Or contact the company through a phone number or website you already know is real.
- 3
If you entered card details
Call your card issuer using the number on the back of the card, report the fraud and ask for a replacement card.
- 4
If you entered a password or personal details
Change that password everywhere you use it and turn on two-step verification. Our guide on what to do after a data breach covers the next steps.
- 5
Report the text
Forward scam texts to 7726 (SPAM) or use your phone's report junk option, then report it to the FTC.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers send these texts to huge lists of numbers, but the messages work better when they have your name or address. Names, phone numbers and addresses like these are easy to buy or look up on people-search sites, and they show up in data breaches. Serus finds the data brokers and people-search sites that list you and removes you from them, and alerts you when your details appear in a breach, so fewer scammers can reach you.
More UPS scams
Frequently asked
Is the UPS delivery text a scam?
If you weren't expecting a package and the message asks you to click a link to update delivery details, treat it as a scam. The FTC says these messages are fake and designed to phish for your information.
I clicked the link. What now?
Don't enter anything further. If you gave card, password or personal details, contact your card issuer, change your passwords and watch your accounts.
How do I check whether I have a real UPS package?
Go to the carrier's official website or app yourself and use your tracking number, or contact the company through a number you already know is real.
Sources
Something wrong or out of date? Tell us and we'll re-check it.