Fake delivery notifications are one of the most common smishing (SMS phishing) attacks. With billions of packages shipped annually, scammers know there's a good chance you're expecting a delivery. This guide teaches you to spot the fakes.
Got a suspicious delivery text?
Paste it here — we'll check if it's a real notification or a smishing attack.
No signup · 6 detection layers · Results in seconds · Cmd+Enter
The simplest check: are you expecting a package? If not, a delivery notification is almost certainly a scam. Even if you are expecting something, verify through the retailer's official app or website, not through the link in the text.
Real delivery notifications come from official carrier domains. USPS uses usps.com, FedEx uses fedex.com, UPS uses ups.com. Scam messages come from random phone numbers and link to domains like "usps-redelivery.top" or "fedex-tracking-update.shop."
USPS, FedEx, UPS, and DHL do not ask for payment through text message links. They don't charge "redelivery fees" via SMS. If a text asks you to pay even a small amount to receive your package, it's a scam.
If a message includes a tracking number, go directly to the carrier's official website or app and enter it there. Don't click the link in the message. If the tracking number doesn't work on the official site, the message is fake.
Scam delivery messages create urgency: "Your package will be returned if you don't respond within 24 hours." Real carriers make multiple delivery attempts and leave notices. They don't threaten to return packages via text.