Fake Tracking Number Scams on Email
Fraudulent emails provide bogus tracking numbers and links that lead to phishing pages or malware, posing as shipment updates from couriers or retailers.
Part of: Fake Tracking Number Scams
Last reviewed: 1 June 2026
A fake tracking number email exploits the anticipation around an order. A message offering a 'tracking update' with a reference number and a 'track your package' link looks exactly like the genuine shipping notifications people routinely click without a second thought.
Email is well suited to this scam because shipping confirmations arrive there constantly, so a fake one blends in, and the tracking link can lead to a phishing page or malware. The bogus tracking number lends false specificity that makes the message feel authentic.
How this scam works on Email
The email claims your shipment is on its way or delayed and provides a tracking number with a link to 'view details' or 'resolve an issue'. The branding mimics a courier or retailer.
The link opens a cloned tracking or login page that captures your account credentials or card details, or it triggers a malicious download. The tracking number is fabricated and leads only to the scammer's page.
Where a recipient is genuinely awaiting a parcel, the timing makes the fake update especially convincing, prompting a click before they verify with the real retailer.
Common red flags
- An email gives a tracking number and link for a parcel you cannot confirm
- The link opens a tracking or login page requesting personal or card details
- The sender address does not match the courier or retailer's official domain
- You are urged to resolve a 'delivery issue' quickly
- The branding looks right but the link's address is off
- An attachment is presented as a shipping document
How to protect yourself
- Track orders only through the retailer or courier's official site or app
- Do not click tracking links or open attachments in unexpected shipping emails
- Match any tracking number against your genuine order confirmation
- Never enter login or card details on a page reached from a shipping email
- Check the sender's full address against the official domain
- Report the email via your provider's phishing tool and delete it
How to report it
- Use your email provider's 'Report phishing' function on the message
- Report the impersonation to the courier or retailer via its official site
- File a report with your national fraud or cybercrime reporting centre
Frequently asked questions
How do I check if a tracking email is real?
Match the tracking number to your genuine order confirmation and track the parcel through the retailer or courier's official site or app, not the email link. If you placed no order, treat the tracking email as a scam.