The example
Subject: Urgent: Your Package Is On Hold! Dear Customer, We attempted to deliver your parcel today but were unable to reach you. To reschedule delivery, please verify your details and pay the outstanding fee of $2.99. Click here to update your information: [fake link] – The USPS Team
The goal? To trick you into clicking a link that either steals your personal information, installs malware, or requests an unnecessary payment.
Other ways this scam might appear
- Email example 2
- Subject: Shipping Notice – Action Required! Hello, Your package with tracking number #123456789 is being held due to incomplete payment. Please complete the outstanding shipping fee to avoid delays. [Click here to pay] (fake link) – DHL Express
- Email example 3
- Subject: Important: Your FedEx Delivery Failed! Dear [Your Name], A package is on its way to you, but we need to confirm your address. Failure to do so may result in the package being returned to sender. Confirm your address now: [fake link] – FedEx Support Team
- Text message example 4
- Your package delivery has failed due to an incorrect address. Update your details here: [fake link]
- Text message example 5
- USPS: Your package is being held due to unpaid shipping fees. Pay now to avoid return: [fake link]
- Text message example 6
- DHL: Your parcel is ready for delivery. Track and confirm your address: [fake link]
- Text message example 7
- FedEx: Final notice! Your package will be returned unless you confirm delivery today: [fake link]
- Text message example 8
- Royal Mail: You have an undelivered package. Reschedule delivery here: [fake link]
Warning signs
- Urgent Language: Scammers use phrases like “Your package is on hold” or “Final attempt to deliver” to create panic and pressure you into acting quickly.
- Fake Links: Fraudulent messages often contain links that look similar to official courier websites but have slight misspellings or extra characters.
- Unexpected Fees: Scammers may claim you need to pay a small “redelivery fee” or “customs charge” to release your package. Legitimate couriers do not request payment this way.
- Requests for Personal Information: A real delivery company will never ask for sensitive details like passwords, bank information, or identification numbers via email or SMS.
- Spoofed Identities: Scammers may use fake sender names or email addresses that mimic well-known delivery services like FedEx, UPS, Royal Mail, or DHL. Always verify with the official website if you’re unsure.
What to do
- If you receive a suspicious message, contact the provider directly using the official contact details on their website. Avoid using links or phone numbers provided in the message.
- Forward scam emails to the provider. Reporting scams helps authorities take action against fraudsters.
- Log in to your account by typing the website address in directly to avoid phoney links. If you have an account warning it will, in most cases, be available from your account.
- Stay informed about common scams, and share information with friends and family to help them avoid falling victim. Remember the SCAM method, Stop, Check, Ask and Monitor!
- Look at the sender’s email address or phone number – Scammers often use random or slightly altered addresses (e.g., “fedex-support@delivery-alert.example” instead of an official FedEx domain).
- Check for spelling and grammar mistakes – Official companies rarely make these errors.
- Be suspicious of urgency – Scammers push you to act fast before you have time to think.
- Verify tracking numbers – Go directly to the official courier website and enter the tracking number.
- Never enter personal details or payment information from a link in a message – If in doubt, contact the delivery company directly.
