Text Scams
Why Did I Receive a Text About a Package I Never Ordered?
Unexpected package texts are often phishing attempts, but they can also come from wrong numbers or real shipments. This guide explains how to verify safely and protect accounts if you clicked.
Do not click the delivery link first
If you received a text about a package you never ordered, do not click the link first. Open the retailer, delivery service, or marketplace through its official app or website and check orders there. Fake package texts are common phishing attempts.
The message may be a scam, wrong number, real gift, old order, or delivery notification connected to someone who mistyped a phone number. The safest response is to verify outside the text.
Do not enter card details, bank information, Social Security numbers, passwords, or one-time codes into a delivery page from an unexpected text.
Why package texts are effective scams
Package messages work because many people expect deliveries and act quickly. Scammers may claim a package is delayed, address confirmation is needed, customs fees are due, or delivery failed.
The FTC warns that phishing messages often impersonate companies and ask people to click links or provide information. Package scams use the same pressure with a familiar daily situation.
If your phone number was exposed, scammers may send more targeted delivery texts, but a package text alone does not prove a breach.
- Delivery failed.
- Address confirmation needed.
- Customs fee due.
- Package held.
- Refund available.
- Tracking link shortened or suspicious.
Verify the message safely
Check your recent orders directly. If the text claims to be from a delivery company, type the official website yourself or use the official app. If you have a tracking number from a real order confirmation email, use that number only on official pages.
If you did not order anything and there is no account evidence, report or delete the text.
If you clicked but entered nothing
Close the page and do not download anything. Check your browser downloads and tabs. If the page asked to install an app or profile, do not continue.
Watch for follow-up messages because clicking can sometimes confirm interest.
If you entered account credentials
Change the password on the real account immediately and anywhere else it was reused. Enable MFA and review active sessions.
Use the official retailer, delivery, email, or payment account page.
If you entered payment details
Contact your bank or card issuer through official channels. Review transactions and ask about card replacement or dispute options if needed.
The CFPB provides consumer guidance on disputing credit card charges.
Secure your phone and accounts
If you installed anything, remove suspicious apps, update your device, and consider trusted security scanning. Then secure email and payment accounts from a trusted device.
Never share one-time codes with anyone who follows up.
- Report the text as spam.
- Block the sender if appropriate.
- Change reused passwords.
- Review transactions.
- Watch for follow-up phishing.
Reduce future package scams
Use official retailer apps for tracking and avoid clicking unexpected delivery links. Remove your phone number from unnecessary public profiles and data broker listings where practical.
A clean exposure check does not guarantee your number is not on spam lists.
Frequently asked questions
Are all unexpected package texts scams?
No. Some are wrong numbers or real notifications, but verify through official apps or websites.
What if I paid a fake delivery fee?
Contact your card issuer or bank immediately through official channels and review transactions.
Should I reply to the text?
Usually no. Avoid engaging with suspicious texts. Report or block when appropriate.
Sources
This guide is reviewed against official guidance. External pages may be updated by their respective owners.