Fake FedEx Parcel-Locker Access Phishing Scam
Scammers send texts or emails posing as FedEx, claiming a parcel is waiting in a nearby locker and that recipients must verify identity or pay a fee through a link to retrieve it. FedEx's legitimate locker service (FedEx OnSite) sends PIN codes through your registered account, never through unsolicited messages requiring payment.
Part of: Parcel Locker Phishing Scams
Last reviewed: 8 June 2026
FedEx operates a network of parcel lockers and FedEx OnSite drop-off points at retail partners such as Walgreens and Dollar General in the United States. The convenience of these locations makes them a useful hook for scammers, who craft messages telling recipients that a package is waiting at a nearby locker and that they must act within hours before it is returned.
The urgency is compounded by a fake 'identity verification' or 'locker access fee' requirement. The link in the message leads to a convincing FedEx-branded page that steals credit-card details or account credentials.
When FedEx genuinely redirects a parcel to an OnSite location, it sends a notification through the contact information on the original shipment and provides a retrieval PIN through the FedEx tracking page or app — never through a separate payment link.
How this scam works on the FedEx brand
A typical message reads: 'FedEx: Your parcel [#XXXXXXXX] is held at a FedEx locker near you. Verify your identity within 12 hours to retrieve it: [link].' The link opens a spoofed FedEx page with a form requesting name, address, card number, and CVV.
In some versions the pretext is a small 'locker access fee' of a few dollars, lowering the victim's defences. Others claim the package contains a valuable item and will be auctioned if not claimed, adding artificial pressure.
Real FedEx OnSite notifications contain the specific retail-partner address (e.g. 'Walgreens at [address]') and a retrieval barcode accessible directly in the FedEx app or via your tracking number at fedex.com — no separate payment or identity-verification link is ever sent.
Common red flags
- Unsolicited message about a parcel at a locker you cannot verify at fedex.com
- Link leads to a domain other than fedex.com
- Request for card payment or identity documents to 'access' the locker
- No specific locker address or retail-partner name is given
- Urgency: 'locker expires in 12 hours — act now'
- PIN or access code is only available after paying a fee
- Sender number is an unknown mobile number, not a registered FedEx short-code
How to protect yourself
- Go directly to fedex.com and enter your tracking number to see any genuine locker notifications
- Download the FedEx app to manage deliveries — real OnSite redirections appear there automatically
- Never pay a fee via a link in a text or email to access a parcel locker
- Contact FedEx customer service via the number on fedex.com if you have questions
- Forward the suspicious text to 7726 and delete it
- If you clicked the link and entered details, contact your bank immediately
- Report the phishing attempt to [email protected]
How to report it
- Forward the email or screenshot the text and send to [email protected]
- Forward smishing texts to 7726
- Report to the FTC at reportfraud.ftc.gov (US)
- If card details were compromised, contact your bank's fraud line immediately
- File a report with the USPIS at postalinspectors.uspis.gov if the scam involves a US address
Frequently asked questions
How does the real FedEx OnSite locker system work?
When FedEx redirects a parcel to a FedEx OnSite location, you receive a notification through the contact details on the original shipment. A retrieval barcode is available in the FedEx app or via your tracking number at fedex.com. No payment is required to access the locker.
Can I tell a fake FedEx page from the real one?
Check the browser address bar — the real FedEx site is fedex.com or a clearly labelled subdomain. Any other domain, however convincing the design, is fake. The real site also does not ask for card details to look up a tracking number.
What if I entered my card details on the fake page?
Contact your bank immediately to cancel the card and dispute any charges. Change passwords on any accounts where you use the same credentials, and report the incident to FedEx and your national fraud authority.