UPS delivery scam texts and emails: how to spot the fake

Quick answer

A text or email that says UPS has a package for you and asks you to click a link to update delivery details is a scam if you weren't expecting a delivery. The FTC says there is no package. Don't click. Check tracking on UPS's own website or app.

All scam alerts
Comes by
Text, Email
Pretends to be
UPS
Last updated

How it works

Scammers pretend to be UPS (or FedEx, USPS and other carriers). The message says a package can't be delivered, or that you need to update your shipping preferences, and gives a link.

The FTC says there is no package: the aim is to phish for your information. The link leads to a page built to look like the carrier's site, where you're asked for personal or card details.

UPS is the company being impersonated here. It isn't behind the messages.

Red flags

  • A delivery message when you aren't expecting a package
  • A link to "update shipping preferences" or fix a delivery problem
  • Pressure to act quickly or the package is returned
  • A sender that is a random phone number or personal email address
  • A website address that isn't the carrier's own

Example message

Scam example Don't reply, call back or tap anything in a message like this.
Unknown number
UPS: Your package was not delivered because the address is incomplete. Update your delivery details here within 24 hours or it will be returned: [link]

What to do

  1. 1

    Don't click or reply

    Delete the message. Replying, even with STOP, can confirm your number is active.

  2. 2

    Check on the carrier's own site

    If you are waiting for a parcel, open the carrier's official website or app yourself and enter your tracking number. Or contact the company through a phone number or website you already know is real.

  3. 3

    If you entered card details

    Call your card issuer using the number on the back of the card, report the fraud and ask for a replacement card.

  4. 4

    If you entered a password or personal details

    Change that password everywhere you use it and turn on two-step verification. Our guide on what to do after a data breach covers the next steps.

  5. 5

    Report the text

    Forward scam texts to 7726 (SPAM) or use your phone's report junk option, then report it to the FTC.

Report it

Serus

Check if your details are exposed with Serus

Scammers find your number and address on data brokers and people-search sites. Serus removes them.

Run a free scan

Why you got it

Scammers send these texts to huge lists of numbers, but the messages work better when they have your name or address. Names, phone numbers and addresses like these are easy to buy or look up on people-search sites, and they show up in data breaches. Serus finds the data brokers and people-search sites that list you and removes you from them, and alerts you when your details appear in a breach, so fewer scammers can reach you.

More UPS scams

All common UPS scams

Frequently asked

Is the UPS delivery text a scam?

If you weren't expecting a package and the message asks you to click a link to update delivery details, treat it as a scam. The FTC says these messages are fake and designed to phish for your information.

I clicked the link. What now?

Don't enter anything further. If you gave card, password or personal details, contact your card issuer, change your passwords and watch your accounts.

How do I check whether I have a real UPS package?

Go to the carrier's official website or app yourself and use your tracking number, or contact the company through a number you already know is real.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Related scams

All scam alerts

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.