Fake Delivery Texts in the United States
How smishing messages impersonating USPS, FedEx, UPS, and Amazon steal card details and personal information from US residents — with reporting routes through the FTC and FBI IC3.
Part of: Fake Delivery Texts
Last reviewed: 1 June 2026
Fake delivery notification texts — smishing messages claiming a parcel is held, a fee is owed, or delivery preferences need updating — are among the most widely reported scam contacts in the United States. The FBI's IC3 and the FTC both publish regular warnings about delivery impersonation campaigns, and the US Postal Inspection Service (USPIS) specifically investigates fraudulent impersonation of USPS.
Because the US has a high volume of e-commerce and a small number of dominant carriers, impersonating USPS, FedEx, UPS, or Amazon is broadly effective. This guide covers the US-specific carrier brands most commonly impersonated, the correct official URLs for each, and the reporting routes available to US residents.
How this scam works on the United States
Fake delivery texts arrive as SMS messages claiming from USPS, FedEx, UPS, or Amazon that a parcel needs attention — a small customs fee, an address update, or a redelivery scheduling charge. The text includes a link to a convincing fake site copying the carrier's real branding.
The fake site asks for the recipient's address, last name, and full card details to pay a small fee (typically $1.99–$3.99). This makes the transaction feel routine. The card details are harvested and used for fraudulent charges. In some variants, a phone number is also collected and used for follow-on phishing.
The FBI has specifically warned that USPS text messages are sent only when a recipient has enrolled in the USPS Informed Delivery programme — USPS does not send unsolicited texts asking for payment. FedEx and UPS similarly do not request payment via unsolicited SMS links.
Links in these texts often use domains that resemble official ones but are slightly different (usps-track.net, fedex-deliverynow.com) — the official domains are usps.com, fedex.com, ups.com, and amazon.com.
Common red flags
- Unexpected text from USPS, FedEx, UPS, or Amazon with a link to pay a fee or update delivery
- URL in the text that differs from the carrier's official domain
- Request to enter full card details to pay a small delivery or customs fee via a text link
- Urgency framing: 'your package will be returned if you do not act within 24 hours'
- Text arrives on a number you have not registered with the carrier
How to protect yourself
- Never click a link in an unexpected delivery text — navigate directly to the carrier's official website to track your package
- Official US carrier domains: usps.com, fedex.com, ups.com — bookmark these and use them directly
- USPS does not send unsolicited texts requesting payment — if you receive one, it is a scam
- Enrol in USPS Informed Delivery (informeddelivery.usps.com) to receive legitimate delivery notifications and recognise fakes
- Forward suspicious texts to 7726 (SPAM) to report to your mobile carrier
How to report it
- Report to the FTC at reportfraud.ftc.gov — include a screenshot of the text message
- Report USPS impersonation specifically to the US Postal Inspection Service at postalinspectors.uspis.gov
- File a complaint with the FBI IC3 at ic3.gov if card details were entered or financial loss occurred
- Forward the text to 7726 (SPAM) to report to your mobile carrier
- If card details were entered, contact your card issuer immediately to dispute charges and request a replacement card
Frequently asked questions
Does USPS send texts requesting payment?
No. USPS does not send unsolicited text messages requesting payment. USPS sends tracking texts only when you have enrolled in Informed Delivery or specifically requested tracking updates for a package. Any unexpected text claiming to be USPS and requesting payment or card details is a scam.
I clicked the link but didn't enter my details — am I at risk?
Clicking a link without entering details carries lower risk, but some sophisticated phishing pages can attempt to install malware or capture device information. Do not click further. Check your device for unusual apps. If you use an iPhone, phishing pages cannot install apps — but run an iOS update. Report the link to the Anti-Phishing Working Group at [email protected].