Fake FedEx SMS Phishing Campaign
Criminals send mass SMS campaigns impersonating FedEx, with messages about undelivered parcels, address confirmation requests, or account security alerts that link to credential-harvesting sites. FedEx's legitimate text notifications are tied to shipments you track and never ask for login credentials or payment via a link.
Part of: Fake Carrier SMS Phishing Scams
Last reviewed: 7 June 2026
FedEx has an active mobile notification system that customers use to track packages and request delivery instructions via text. Scammers exploit the familiarity of these legitimate notifications by sending convincing fakes that mimic FedEx's short-code style and message format.
Because many people receive genuine FedEx tracking texts on a regular basis, fake messages blend into the expected pattern. The difference lies in what the message asks you to do: genuine FedEx tracking notifications provide status updates and sometimes allow one-tap responses to redirect a parcel — they do not ask for your FedEx account password or credit card details.
These campaigns are sent in bulk, targeting random phone numbers. Recipients who are coincidentally expecting a FedEx delivery are especially at risk because the message seems perfectly timed.
How this scam works on the FedEx brand
Messages follow variations like: 'FedEx: We tried to deliver your package. Confirm your delivery address: [link]' or 'FedEx Account Alert: Unusual activity detected. Secure your account: [link].' Both lead to pages designed to capture FedEx.com login credentials or financial information.
FedEx's real notification system, FedEx Delivery Manager, allows customers to set preferences through their fedex.com account. Text messages from FedEx come from verified short codes and link exclusively to fedex.com — never to third-party domains. If you have not enrolled in FedEx Delivery Manager for a specific shipment, you will not receive unsolicited status texts.
The 'account security' variant is particularly deceptive because it instills fear of a breach. The real FedEx security team communicates account issues through your registered email and official account portal — not via SMS links to third-party pages.
Common red flags
- Unsolicited FedEx text that you did not sign up to receive for a specific shipment
- Link leads anywhere other than fedex.com
- Message asks for your FedEx account username and password
- Security alert via SMS with a link — FedEx handles security through your account email
- Message about a package you are not expecting
- Short code or phone number does not match FedEx's known notification numbers
- Page requests credit or debit card information
How to protect yourself
- Go directly to fedex.com and log in to check any account alerts or shipment status
- Enrol in FedEx Delivery Manager through your official FedEx account for legitimate text notifications
- Never click a link in an unexpected FedEx text message
- Forward suspicious texts to 7726 and report to [email protected]
- If you entered credentials, change your FedEx password immediately and enable two-factor authentication
How to report it
- Forward suspicious emails to [email protected]
- Forward smishing texts to 7726
- Report to the FTC at reportfraud.ftc.gov
- Report to the FBI IC3 at ic3.gov if financial loss occurred
- Contact your bank if payment details were entered
Frequently asked questions
How do I know if a FedEx text is real?
Genuine FedEx tracking texts are tied to shipments you enrolled in FedEx Delivery Manager for. They contain a tracking number you can verify at fedex.com and never ask for passwords or card details.
What is FedEx Delivery Manager?
FedEx Delivery Manager is a free service you enrol in at fedex.com. It lets you customise delivery preferences for incoming FedEx shipments and receive status notifications — all managed through your secure fedex.com account.