>
Digital Compass
That 'delivery failed' text could be a scam: A holiday guide to staying safe
Posted
The holiday season brings packages, tracking numbers, and a steady stream of delivery notifications. That makes it a particularly convincing time for one of the simplest online scams: a text message saying your package couldn't be delivered.
Maybe the message says the address was incomplete. Maybe it claims a delivery fee is due. It may even include a familiar-looking postal logo and a link that appears to solve the problem in seconds.
Before you tap, take a moment. That message might not be from a delivery company at all.
What the scam looks like
A typical message reads something like this:
Your package could not be delivered because the address information is incomplete. Update your details now to avoid a return to sender.
The message includes a link. When you open it, you're taken to a website designed to resemble USPS or another carrier. You may be asked to enter your name, address, password, or payment card to arrange another delivery.
The problem is that the website belongs to a scammer. The information you enter can be used for fraudulent charges or identity theft.
This is called smishing — phishing carried out through an SMS text message. And it isn't limited to the holidays. The seasonal rush simply gives criminals a believable excuse to contact you.
Five warning signs to watch for
1. The message creates urgency. Phrases such as “act immediately,” “final notice,” or “your package will be returned” are intended to make you react before you check.
2. The link looks unusual. A web address may include a familiar company name but lead to an unrelated domain. A logo and a polished page are not proof that a website is genuine.
3. You didn't request the message. According to the U.S. Postal Inspection Service, USPS text tracking is a service customers initiate; unsolicited messages containing links should be treated with suspicion.
4. It asks for personal or payment information. A small “redelivery fee” may seem harmless, but entering a card number on a counterfeit site can expose much more than the amount shown.
5. You cannot connect the alert to a real order. Scammers send these texts to large numbers of people, counting on the fact that some recipients really are expecting a delivery.
What to do instead of clicking
If you're waiting for a package, check its status independently. Open the retailer's app, revisit your order-confirmation email, or type the carrier's official website address into your browser yourself. Use the tracking number from your purchase — not the link in the unexpected text.
If the message appears to be from USPS, go directly to USPS.com. You can also consult the U.S. Postal Inspection Service's guidance on package-tracking text scams.
Do not reply to the suspicious message, even to say “stop.” Use your phone's Report Junk or spam-reporting option when available, and block the sender. You can forward suspicious texts to 7726 (SPAM) to report them through your wireless carrier. Suspected fraud can also be reported to the Federal Trade Commission.
What if you already clicked?
First, don't panic — but don't ignore it either. What you should do depends on what happened after you opened the link.
If you opened a page but entered no information, close it. Make sure your phone and apps are updated. Stay alert for unusual account activity or follow-up messages.
If you entered a password, change it immediately through the real website or app, not through the text. If you've used the same password elsewhere, change those accounts too. Turn on multifactor authentication where available.
If you entered credit or debit card details, contact your bank or card issuer promptly using the number on your card. Explain that you may have entered your information on a fraudulent website, and follow its instructions for protecting the account. The Postal Inspection Service also advises contacting your financial institution if you interacted with a suspicious package-tracking link.
If you downloaded an unfamiliar app or file, stop using it and get help reviewing the device before entering additional sensitive information.
A small pause can prevent a big headache
The most effective habit is surprisingly simple: don't let an unexpected text choose where you go online. Verify the delivery through the store or carrier you already know. Legitimate shipment information should be accessible without following a mystery link.
This is also worth discussing with family members who might be less comfortable recognizing fraudulent messages. A quick conversation now can prevent a costly mistake later.
Comments
No comments on this item Please log in to comment by clicking here