Fake FedEx Order Confirmation Phishing Email
Scammers send fake FedEx shipment confirmation emails for orders the recipient never placed, prompting panic clicks on 'cancel shipment' links that lead to phishing pages or malware downloads. Any FedEx tracking number in the email can be verified instantly at fedex.com.
Part of: Fake Order Confirmation Phishing Scams
Last reviewed: 7 June 2026
Unexpected shipment confirmation emails trigger an instinctive reaction: someone has placed an order using my details and I need to cancel it immediately. This urgency is exactly what criminals manufacturing fake FedEx order confirmations rely on to generate quick, unthinking clicks.
The emails are designed to look exactly like genuine FedEx shipping notifications: the company's purple-and-orange colour scheme, tracking reference, estimated delivery date, and a prominent action button. Only the tracking number — which returns no valid result at fedex.com — and the link destination reveal the deception.
FedEx's genuine shipment confirmation emails come from @fedex.com addresses and link directly to fedex.com for any follow-up actions. They do not include executable attachments or links to third-party cancellation portals.
How this scam works on the FedEx brand
The phishing email reads: 'FedEx: Your shipment [#XXXXXXXX] has been dispatched and is on its way. Estimated delivery: [date]. To view order details or cancel: [link].' The link leads to a fake login page or a malware download.
Some variants include a PDF attachment labelled 'FedEx Shipment Invoice' containing malware or a macro-enabled document designed to install a keylogger or ransomware.
Business variants target accounts payable teams with fake FedEx invoices for shipping services, requesting bank transfer payments — a variant of invoice-redirection fraud using FedEx branding.
Common red flags
- Shipment confirmation for a package you never ordered
- Tracking number returns no result at fedex.com
- 'Cancel' link goes to a non-fedex.com domain
- Email asks for FedEx credentials to manage the shipment
- PDF or Word attachment labelled as a shipment invoice
- Email address is not from @fedex.com
- Invoice requests bank transfer to an account you have not previously used with FedEx
How to protect yourself
- Verify the tracking number at fedex.com before clicking any link
- Never open attachments in unexpected FedEx shipment confirmation emails
- If you believe a fraudulent charge was made, contact your bank directly — not via the email
- Forward phishing emails to [email protected]
- For business accounts, verify invoices directly with your FedEx account manager
How to report it
- Forward suspicious emails to [email protected]
- Report to the FTC at reportfraud.ftc.gov
- Report malware to your national cybersecurity centre
- Report to Action Fraud (UK) at actionfraud.police.uk
- If a fraudulent payment was made, contact your bank immediately
Frequently asked questions
What should I do if I received a FedEx confirmation for an order I never placed?
Check the tracking number at fedex.com directly. If it returns no result, the email is fabricated — do not click any links. Report it to [email protected] and to your national fraud body.
Are FedEx invoice PDF attachments ever legitimate?
FedEx does send invoices, but they are accessed through your FedEx Billing Online account rather than as unsolicited email attachments. Be very cautious with any unexpected PDF or Word attachment claiming to be a FedEx invoice.