Fake delivery text scam: how to spot package & toll SMS

Short answer: Real carriers almost never text you a link to pay a tiny “redelivery fee.” Any SMS that pushes you to pay or “confirm an address” through a short link is almost certainly a scam (smishing). Open the official app or type the carrier’s site yourself — don’t tap the text.

This page expands the seed guide linked from PhishCheck’s FAQ (“How do I spot a fake delivery text?”) into a full checklist you can share with parents and roommates.

Why these texts work

Delivery and toll scams hitch a ride on everyday anxiety: packages go missing; toll bills are easy to forget. The message is short, mobile-friendly, and often arrives from a random number or email-to-SMS gateway. AI makes the wording clean — no broken English required.

Common flavors in 2025–2026:

• “Your package is on hold — pay $1.99 to reschedule.”
• “USPS: delivery attempt failed. Confirm address.”
• “Unpaid toll — pay now to avoid penalties.”
• “Customs fee required for international shipment.”

The goal is usually a card-harvesting page, malware download, or account login clone.

6 red flags (print this)

1. A tiny fee ($0.99–$3) to “release,” “redeliver,” or “update” a package. Carriers don’t run finance ops through random SMS links.
2. Urgency: “within 24 hours,” “will be returned to sender,” “penalties start tomorrow.”
3. Look-alike domains: usps-redelivery.xyz, fedex-track.top, ups-delivery-status.click, misspellings (uspps, fedеx with a Cyrillic character).
4. You weren’t expecting a package — or the tracking number doesn’t match anything in your real carrier app.
5. Generic greeting, no recognizable order ID from a shop you actually used.
6. Odd sender: international numbers, email-style SMS, or a brand name that doesn’t match the URL when you long-press the link.

What to do instead (safe path)

1. Don’t tap the link. Don’t call numbers inside the text.
2. Open the official app (USPS, UPS, FedEx, DHL, your toll authority) or type the real website in the browser.
3. Enter any tracking number there — or check “My Packages” / account mail, not the SMS.
4. Forward US scam texts to 7726 (SPAM). Report phishing emails via your provider and [email protected].
5. If you already tapped and entered a card, call the number on the back of your card and freeze/replace it. Then follow the clicked a phishing link checklist.

Quick “is this USPS text a scam?” decision tree

Did you order something recently?

  ├─ No → Treat as scam. Don’t tap. Delete / report 7726.

  └─ Yes → Open official USPS (or shop) app.

        ├─ Tracking matches & status normal → Ignore SMS; use app only.

        └─ No match / weird fee ask → Scam. Report. Optional: paste into PhishCheck.

Same logic for FedEx, UPS, Amazon delivery texts, and “unpaid toll” messages: official app first, SMS link never.

Example patterns (illustrative — do not visit)

“USPS: Your parcel is held at the depot. Pay redelivery fee: https://usps-redeliver[.]xyz/track”

Red flags: unexpected hold, tiny fee, non-USPS domain, urgency.

“Toll unpaid $2.40. Avoid suspension: https://pay-toll-now[.]top/…”

Red flags: fear of suspension, unknown short domain, payment via SMS link.

When teaching others, show the domain, not just the logo in the preview card. Logos are trivial to copy.

Paste it for a second opinion

If a family member forwards a screenshot or text and you’re on the fence, paste the wording (redact addresses and phone numbers) into PhishCheck AI. You’ll get a No obvious red flags found / Suspicious / Likely scam style verdict, listed red flags, and next steps.

PhishCheck is a second opinion after your filters, not a replacement for official apps. This app does not upload pasted messages or use them for training. It can be wrong; when unsure, use the carrier’s real site only.

Demo note: the public checker uses local browser rules — live AI is not available. Pasted text is not uploaded by this app; hosting metadata is separate. May miss scams or flag legitimate messages.

Check a delivery or toll text free →