UPS scam texts and emails: how to spot a fake delivery message
Quick answer
A text or email from 'UPS' with a link to reschedule delivery, pay a fee or confirm your address is a common scam. UPS says it doesn't ask for payments or personal details this way. Don't click. Check your package at ups.com yourself and forward the message to fraud@ups.com.
- Comes by
- Text, Email, Phone call, Mail
- Pretends to be
- UPS
- Last updated
How it works
Scammers pretend to be UPS because nearly everyone is waiting on a package. UPS says fraudulent messages can come by email, text or phone call, and that links in texts may contain malware or lead to a fraudulent website.
The usual versions:
- The missed delivery text. A message says a package couldn't be delivered and sends you to a link to reschedule or pay a small fee. The page collects your card or login details.
- The shipping label or invoice email. An email with an attachment or link that's really a way to install malware or steal a password.
- The fake check or money order. UPS says to report fraudulent checks or money orders delivered by UPS, with the tracking number, to fraud@ups.com.
UPS says it does not request payments, personal information, financial information, account numbers, IDs, passwords or copies of invoices in an unsolicited manner.
Red flags
- A text or email about a delivery you weren't expecting
- A link to reschedule, pay a small fee or 'confirm your address'
- A request for payment, card details, passwords or ID
- An attachment labeled as an invoice or shipping label
- Urgent wording like 'final notice' or 'package will be returned'
- A sender address or link that doesn't belong to UPS
Example message
UPS: Your package could not be delivered because the address is incomplete. Update your details within 24 hours at [link] or it will be returned.
What to do
- 1
Don't respond, click or open attachments
UPS's advice is to not respond, and to open a new browser window and go to the real website instead.
- 2
Check the shipment yourself
Log in at ups.com or open the UPS app you already use and look for real shipping or billing activity. Only use tracking numbers you got from the sender or retailer.
- 3
Report it to UPS
Forward a suspicious email, with its full internet headers, to fraud@ups.com before you delete it. UPS asks you to report fraudulent texts and calls to the same address.
- 4
If you clicked and entered details
Change the passwords you used, watch for charges you don't recognize and call your bank or card issuer. If you opened an attachment, run a security scan.
- 5
Report it to the FTC
Report it at ReportFraud.ftc.gov. It helps to include the number or email address the message came from.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
To send a delivery text that lands, a scammer needs a working mobile number, often matched to a name. Those lists are built from people-search sites, breaches and other leaked data.
Serus finds where your phone number, address and email are listed on people-search sites and other data brokers and removes them, and alerts you when your details show up in a breach. That won't stop every message, but it leaves scammers with less to work from. If you clicked or shared anything, our guide on what to do after a data breach covers the next steps.
Common UPS scams
- UPS delivery scam A text or email that says UPS has a package for you and asks you to click a link to update delivery details is a scam if you weren't expecting a delivery. The FTC says there is no package. Don't click. Check tracking on UPS's own website or app.
- UPS redelivery scam A text or email that says UPS couldn't deliver and asks you to pay a fee or confirm personal details is a scam. UPS says it doesn't ask for payment or personal information that way. Don't tap the link: track the package at ups.com.
- UPS reschedule delivery scam A text or email saying your UPS delivery failed and asking you to click to reschedule, or to pay a small fee, is a scam. Don't click. Track your package from the retailer's site or UPS directly, then report the message and delete it.
- UPS tracking scam A text or email saying your UPS package is held and asking you to click a tracking link may be phishing. UPS is the company being impersonated. Don't click: track the package by going to UPS's site or app yourself, and report the message.
- UPS urgent notice text scam A text that claims an urgent UPS notice, a package waiting or an account about to be suspended is a scam. UPS says fake messages ask for personal details or a payment and may carry malware links. Don't tap the link. Check tracking on UPS's own site and report it.
Frequently asked
Does UPS send texts asking for payment?
UPS says it does not request payments, personal or financial information, account numbers, IDs or passwords in an unsolicited manner. Check your shipment on ups.com instead.
Where do I forward a UPS scam email?
UPS asks you to forward it, with the full internet headers, to fraud@ups.com before deleting it. It asks for fraudulent texts and calls to be reported there too.
Is UPS a scam?
No. UPS is a real carrier. The scam is people pretending to be UPS to steal money or logins.
I clicked the link but entered nothing. Am I OK?
Probably, but UPS says links in texts may contain malware. Don't enter anything, close the page and consider running a security scan.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
