A text says a package could not be delivered and asks you to tap a link. If you were not expecting a delivery, or even if you were, it could be a scam. The Federal Trade Commission (FTC) says fake package delivery alerts were the most commonly reported text scam in 2024. This guide covers what to do with the message, how to report it, and what to do if you already clicked or shared information.
Key takeaways
- Do not click links or reply to unexpected texts about a delivery problem.
- If the message might be real, contact the carrier or store using a phone number or website you already know is real, not the details in the text.
- Forward the text to 7726 (SPAM) and report it at ReportFraud.ftc.gov.
- If you shared a password, card number or Social Security number, act quickly using the steps below.
What should you do with a suspicious delivery text?
Per the FTC, scammers send messages claiming there is a problem with an incoming delivery. Do not click the link and do not reply. If you think the message could be legitimate, check your order in the store’s app or on its official website, or call the carrier at a number you already trust. Then block the number or filter unwanted texts on your phone.
How do you report a scam delivery text?
- Forward the message to 7726 (SPAM) so your wireless provider can detect and block similar texts.
- Report it in the Apple iMessage app or the Google Messages app on Android.
- File a report with the FTC at ReportFraud.ftc.gov.
What if you already clicked or shared information?
The FTC’s recovery advice depends on what you gave away:
| What happened | What to do |
|---|---|
| You installed software or let someone access your device | Update your security software, run a scan and delete anything it flags. Contact the device maker or a trusted company if you need help removing malware. |
| You gave a password | Create a new, strong password for each affected account and anywhere else you used it. Turn on two-factor authentication. |
| You gave a card number | Contact your card issuer or bank right away, using the number on the back of your card or your account app, and ask for a refund of unauthorized charges. |
| You gave your Social Security number | If it was used, report it at IdentityTheft.gov and follow the recovery plan. If it was not, or you are unsure, go to IdentityTheft.gov/databreach. |
A password manager makes it easier to use a unique password on every account, as we explain in our guide to choosing a password manager. It also helps to check your credit report for free if your personal details may have been exposed.
How can you spot a fake delivery text?
The FTC advice above comes down to one rule: treat any unexpected text with a link as unverified. Verify through a channel you started yourself, such as the store’s official app or a phone number you already had. Our guide to recognizing online shopping scams covers other common warning signs, and our tips for protecting personal data on public Wi-Fi help limit what scammers can learn.
FAQ
Should I reply STOP to a suspicious text? The FTC advises not replying to unexpected texts. Forward it to 7726 and block the number instead.
What if I am actually expecting a package? Check the order in the store’s app or website, or contact the carrier using contact details you already trust, not the ones in the text.
Where do I report a scam text? Forward it to 7726 (SPAM), report it in your messaging app, and file a report at ReportFraud.ftc.gov.
Can I get my money back if my card was used? The FTC notes that federal law protects you from unauthorized use of your credit card, and a similar protection applies to debit cards. Contact your issuer right away.
For more, visit our Consumer Safety section.
Reporting steps and the 2024 finding are from the FTC. Recovery steps are from the FTC’s What To Do if You Were Scammed. This article is general information for U.S. readers, not legal or financial advice.
Leave a Reply