Fake Tracking Number Scams on Email
Fraudulent emails provide bogus tracking numbers and links that lead to phishing pages or malware, posing as shipment updates from couriers or retailers.
Part of: Fake Tracking Number Scams
Last reviewed: 1 June 2026
A fake tracking number email exploits the anticipation around an order. A message offering a 'tracking update' with a reference number and a 'track your package' link looks exactly like the genuine shipping notifications people routinely click without a second thought.
Email is well suited to this scam because shipping confirmations arrive there constantly, so a fake one blends in, and the tracking link can lead to a phishing page or malware. The bogus tracking number lends false specificity that makes the message feel authentic.
How this scam works on Email
The email claims your shipment is on its way or delayed and provides a tracking number with a link to 'view details' or 'resolve an issue'. The branding mimics a courier or retailer.
The link opens a cloned tracking or login page that captures your account credentials or card details, or it triggers a malicious download. The tracking number is fabricated and leads only to the scammer's page.
Where a recipient is genuinely awaiting a parcel, the timing makes the fake update especially convincing, prompting a click before they verify with the real retailer.
Common red flags
- An email gives a tracking number and link for a parcel you cannot confirm
- The link opens a tracking or login page requesting personal or card details
- The sender address does not match the courier or retailer's official domain
- You are urged to resolve a 'delivery issue' quickly
- The branding looks right but the link's address is off
- An attachment is presented as a shipping document
How to protect yourself
- Track orders only through the retailer or courier's official site or app
- Do not click tracking links or open attachments in unexpected shipping emails
- Match any tracking number against your genuine order confirmation
- Never enter login or card details on a page reached from a shipping email
- Check the sender's full address against the official domain
- Report the email via your provider's phishing tool and delete it
How to report it
- Use your email provider's 'Report phishing' function on the message
- Report the impersonation to the courier or retailer via its official site
- File a report with your national fraud or cybercrime reporting centre
Frequently asked questions
I entered my card details on a fake tracking page — what should I do right away?
Contact your card provider immediately to flag the card for potential fraud and ask about a replacement, since prompt reporting reduces the risk of unauthorized charges going through. Monitor your statement closely over the following weeks for anything unfamiliar.
Why would a scammer send a tracking email if I never ordered anything?
Scammers send these emails broadly without knowing who has genuine orders pending, relying on the fact that a portion of recipients will be expecting a parcel and click without checking. If you haven't ordered anything recently, that's a strong sign the email is unrelated to any real shipment.
Is there a way to verify a tracking number is genuinely tied to my order?
Compare the tracking number in the email against the one shown in your actual order confirmation from the retailer, which you can find by logging into your account on the retailer's official site. If the numbers don't match, or you have no record of the order at all, treat the email as fraudulent.
How do I check if a tracking email is real?
Match the tracking number to your genuine order confirmation and track the parcel through the retailer or courier's official site or app, not the email link. If you placed no order, treat the tracking email as a scam.