Shipment Tracking on an ipad

In our always-connected world, almost everyone receives packages—from groceries to gadgets. But in August 2025, scammers are hijacking our online habits with a new wave of fake package tracking and phishing scams, tricking thousands of Americans into handing over personal info, payment credentials, and more.

Let’s break down how this scam works, who it targets, and—most importantly—how you can protect yourself.

How the Scam Works

  1. You get a text or email that appears to be from a major delivery company (e.g., FedEx, UPS, USPS, or Amazon).
  2. The message says:
    • “Your package is delayed. Click to reschedule.”
    • “We couldn’t deliver your parcel. Confirm your address.”
    • “Pay a $1 fee to release your shipment.”
  3. You click the link.
  4. You’re sent to a realistic-looking fake website, designed to mimic the delivery company.
  5. You’re asked for:
    • Credit card or bank info- Stop and think why would credit card information be needed for a delivery?
    • Login credentials – Why would FedEx, UPS, USPS or Amazon need my login credentials?
    • Personal data (name, DOB, address, SSN) – Why would they need my DO or my SSN?  If they are delivering to me, they should already know my name and address.
  6. Once entered, your info is stolen—and possibly sold, reused, or used in future fraud.

 Who Is Being Targeted?

  • Online shoppers — particularly Amazon Prime, Etsy, and eBay users.
  • Seniors, who may be less familiar with fake URL signs.
  • Small business owners with frequent shipping activity.
  • People expecting packages, especially around the back-to-school season and upcoming holidays.

Red Flags to watch out for:

  • Texts from unfamiliar short codes or random numbers.
  • Web addresses that look almost correct (e.g., fedx-delivery.co instead of fedex.com).
  • Requests for payment to deliver a package — a common scam tactic.
  • Bad grammar or urgency tactics like “action required in 12 hours!”

How to Protect Yourself Against Package Tracking Scams

  • Do NOT click on suspicious links — even if the message looks real.
  • Go directly to the company’s website or use the official app to track packages.
  • Enable two-factor authentication (2FA) on all accounts, especially email and financial ones.
  • Install browser protections — Chrome and Google Messages now warn users about scam links using real-time AI.
  • Report phishing attempts to FTC.gov/complaint or your delivery carrier’s fraud division.
  • Use Email Rules and Filters:

           Set up filters to route suspicious emails to spam and automatically flag anything with keywords like:

  • “Verify your address”
  • “Delivery hold”
  • “Tracking suspended”

If you believe you’ve been targeted or scammed:

Final Thoughts

These scams are sophisticated and evolve fast. Just because a message looks like it’s from FedEx or USPS doesn’t mean it is. When in doubt, pause—then go to the official source.