You receive a text message claiming your UPS package is stuck in transit and needs immediate action. The message looks legitimate, includes tracking numbers, and urges you to click a link to resolve the issue. But there's no package coming—and clicking that link could compromise your personal information, drain your bank account, or infect your device with malware.

UPS text scams have become one of the most prevalent forms of smishing (SMS phishing) attacks, with the Federal Trade Commission reporting that Americans lost over $330 million to text message scams in 2022 alone. These fraudulent messages exploit our expectation of package deliveries—particularly effective given that 21 billion packages were shipped in the U.S. last year—to trick victims into revealing sensitive information or downloading malicious software.

What Is the UPS Text Scam and How Does It Work

The UPS text scam is a form of smishing where fraudsters impersonate UPS to steal personal information, financial data, or install malware on your device. These scammers send mass text messages claiming there's an issue with a package delivery, then direct victims to click a link that leads to a fake website designed to harvest credentials or payment information.

Here's how the typical UPS scam message operates:

The Initial Contact: You receive an unsolicited text message appearing to come from UPS, often with a spoofed sender name that displays as "UPS" or includes official-looking short codes. The message claims there's a problem with a delivery—perhaps a missed delivery attempt, customs hold, unpaid shipping fees, or address verification needed.

The Urgency Factor: The message creates artificial urgency by suggesting your package will be returned, destroyed, or permanently held unless you act immediately. This psychological pressure is designed to bypass your critical thinking and prompt impulsive action.

The Malicious Link: The text includes a shortened URL (using services like bit.ly or tinyurl) or a domain that mimics UPS's legitimate website. Common fake domains include variations like "ups-tracking.com," "ups-delivery-service.com," or "upstracking.net"—close enough to fool a quick glance but not affiliated with the real ups.com.

The Data Harvest: When you click the link, you're directed to a convincing replica of the UPS website. The fake site may ask you to:

Enter your tracking number and personal details
Provide credit card information to pay a small "redelivery fee" (typically $1-$3 to seem legitimate)
Download an "app" to track your package (actually malware)
Verify your identity by entering Social Security numbers or other sensitive data

The Exploitation: Once scammers have your information, they can commit identity theft, make unauthorized purchases, sell your data on the dark web, or use banking trojans to access your financial accounts. The malware variants can also steal contacts from your phone to spread the scam further.

What makes this scam particularly insidious is how scammers obtain your phone number in the first place. Data brokers collect and sell personal information—including phone numbers, addresses, and shopping habits—to anyone willing to pay. When scammers purchase these databases, they know which phone numbers are associated with active online shoppers, making their fake delivery notifications far more convincing.

Real Examples of UPS Text Scams

Understanding what these scams actually look like helps you recognize them instantly. Here are documented examples reported to the FTC, Better Business Bureau, and cybersecurity researchers:

Example 1: The Missed Delivery Scam

```

UPS: Your package has been held at our facility due to incomplete address information. Please confirm your details: [malicious-link]

```

This version preys on the common fear that you've made a mistake when ordering something online. The message implies you're at fault for the delivery problem, making you more likely to "fix" the issue quickly.

Example 2: The Small Fee Scam

```

UPS Notification: Your parcel is awaiting delivery. A $2.99 shipping fee is required. Pay here to schedule delivery: [malicious-link] Ref: US9847362

```

By requesting a small, seemingly reasonable amount, scammers reduce suspicion. Many victims think "it's only $3" and don't realize they're handing over credit card details that will be used for much larger fraudulent charges.

Example 3: The Customs Hold Scam

```

UPS ALERT: Package #1ZE8473920 from international sender is held at customs. Duty payment of $1.50 required for release: [malicious-link]

```

This sophisticated variant targets people who actually do order international packages. The inclusion of a fake tracking number adds legitimacy, and the minimal customs fee seems plausible.

Example 4: The Malware Download Scam

```

UPS: We attempted delivery today. Download our tracking app to reschedule: [malicious-link]

```

Instead of harvesting information directly, this version tricks victims into installing malicious software that can access everything on their device—from banking apps to stored passwords.

Example 5: The Account Verification Scam

```

UPS Security: Suspicious activity detected on your UPS account. Verify your identity immediately to prevent account suspension: [malicious-link]

```

This approach targets people who actually have UPS My Choice accounts, using fear of account loss to prompt immediate action without verification.

According to cybersecurity firm Proofpoint, these scams saw a 459% increase during the 2022 holiday shopping season, with attackers timing their campaigns to coincide with major retail events like Black Friday, Cyber Monday, and Prime Day when people expect multiple deliveries.

Red Flags: How to Spot a UPS Text Scam Instantly

Recognizing fake delivery texts requires knowing what to look for. Here are the definitive warning signs that a message is fraudulent:

Unsolicited Messages About Unknown Packages

Legitimate UPS notifications only arrive if you've signed up for UPS My Choice or if the sender specifically requested delivery notifications be sent to your number. If you receive a text about a package you're not expecting and didn't sign up for tracking alerts, it's almost certainly a scam.

Suspicious Sender Information

Real UPS texts come from specific short codes: 48515 or 69877. While scammers can sometimes spoof these numbers, any message from a regular 10-digit phone number or an unfamiliar short code claiming to be UPS is fraudulent. Additionally, if the sender name displays as "UPS" but the actual number beneath it looks suspicious, that's number spoofing.

Generic Greetings and Lack of Personalization

Authentic UPS communications typically include your name or specific details about your shipment. Scam messages use generic language like "Dear Customer" or "UPS User" because they're sent to thousands of people simultaneously.

Urgent Language and Threats

Phrases like "act immediately," "within 24 hours," "package will be destroyed," or "final notice" are psychological manipulation tactics. UPS doesn't threaten to destroy your packages or create artificial urgency. Legitimate delivery issues are communicated calmly with reasonable timeframes.

Requests for Payment via Text

UPS never requests payment through text message links. If there are additional fees (like customs duties), these are collected at delivery or through official channels, never via a text message link. Any request for credit card information, even small amounts, is a scam.

Suspicious URLs

Before clicking any link, examine it carefully:

Shortened URLs (bit.ly, tinyurl, etc.) hide the actual destination
Misspelled domains like "ups-tracking.com" or "upps.com" instead of "ups.com"
Unusual top-level domains like .net, .co, .info when UPS uses .com
HTTP instead of HTTPS (though scammers increasingly use HTTPS to appear legitimate)

You can check where a shortened URL leads by using a link expansion service like CheckShortURL.com before clicking.

Grammatical Errors and Typos

While scammers have become more sophisticated, many fake delivery texts still contain spelling mistakes, awkward phrasing, or grammatical errors that wouldn't appear in official corporate communications.

Requests for Excessive Personal Information

If a link leads to a page asking for your Social Security number, driver's license, or other information unrelated to package delivery, it's definitely a scam. UPS already has your delivery address if they're shipping to you—they don't need you to "verify" it via text.

Tracking Numbers That Don't Work

If you're unsure about a message, copy the tracking number and paste it directly into ups.com (never click the provided link). Fake tracking numbers won't return any results in the official UPS system.

What to Do If You've Been Targeted by a UPS Scam Message

Receiving a fake delivery text doesn't mean you're compromised—but your response determines your risk level. Here's exactly what to do:

If You Only Received the Message (Didn't Click)

Delete the message immediately to prevent accidental clicks later
Block the sender number through your phone's messaging app
Report it (see next section for specific reporting procedures)
Don't respond in any way—even texting "STOP" confirms your number is active

If You Clicked the Link But Didn't Enter Information

Close the browser immediately and clear your browsing history and cache
Run a security scan on your device using reputable antivirus software (Malwarebytes, Norton, or your device's built-in security)
Monitor your device for unusual behavior over the next few days (battery drain, unexpected pop-ups, unknown apps)
Change passwords for important accounts if you were logged into anything when you clicked

If You Entered Personal Information

Document everything: Take screenshots of the fake website, note what information you provided, and save the original text message
Contact your bank/credit card company immediately if you entered financial information—request a card replacement and dispute any unauthorized charges
Place a fraud alert with the three major credit bureaus:

- Equifax: 1-800-525-6285 or equifax.com/personal/credit-report-services

- Experian: 1-888-397-3742 or experian.com/fraud

- TransUnion: 1-800-680-7289 or transunion.com/fraud-alerts

Contacting one bureau requires them to notify the other two under federal law (15 U.S.C. § 1681c-1)

Consider a credit freeze for more robust protection—this prevents anyone from opening new accounts in your name
File an identity theft report at IdentityTheft.gov, which creates a recovery plan and provides official documentation
Monitor your credit reports closely for the next 12 months for any suspicious activity

If You Downloaded an App or File

Do not open the file if you haven't already
Disconnect from the internet (turn off WiFi and mobile data) to prevent malware from communicating with command servers
Boot into Safe Mode (Android) or Recovery Mode (iPhone) and uninstall the suspicious app
Factory reset your device if you're unable to remove the malware—back up important data first if possible
Change all passwords from a different, secure device after your phone is clean
Enable two-factor authentication on all important accounts for additional security

Ongoing Monitoring

After any interaction with a UPS text scam, remain vigilant:

Check bank and credit card statements weekly for at least three months
Review your credit reports (free at AnnualCreditReport.com) every four months, rotating through the three bureaus
Watch for tax fraud by filing early—scammers sometimes use stolen information to file fraudulent tax returns
Be alert for follow-up scams as your number may be marked as responsive

How to Report UPS Text Scams

Reporting these scams helps authorities track patterns, shut down malicious operations, and warn other potential victims. Here's where to file reports:

Report to UPS

Forward the fraudulent text message to spam@ups.com with a brief explanation. You can also report it through UPS's official fraud reporting page at ups.com/us/en/help-center/legal-terms-conditions/fraud.page. While UPS can't directly stop scammers, they work with law enforcement and can take down copycat websites.

Report to the Federal Trade Commission

File a complaint at ReportFraud.ftc.gov or call 1-877-FTC-HELP. The FTC aggregates scam reports to identify trends and coordinate enforcement actions. Your report contributes to a database that helps protect others.

Report to Your Mobile Carrier

Forward the scam text to 7726 (SPAM) on most major carriers (Verizon, AT&T, T-Mobile, Sprint). This free service helps carriers identify and block scam numbers. After forwarding, you'll receive an automated response asking for the sender's number—reply with that information.

Report to the FBI's Internet Crime Complaint Center

For scams involving financial loss, file a report at ic3.gov. The IC3 specifically investigates cybercrimes and coordinates with international law enforcement when scammers operate overseas.

Report to Your State Attorney General

Many state AGs have consumer protection divisions that track regional scam patterns. Find your state AG's office at naag.org/find-my-ag and look for their consumer complaint portal.

Report to the Anti-Phishing Working Group

Forward the scam message to reportphishing@apwg.org. This industry association shares threat intelligence with businesses and law enforcement globally.

Document Your Reports

Keep confirmation numbers and reference IDs from each report. If you later discover financial damage, these reports establish a timeline and demonstrate you took appropriate action—important for insurance claims or legal proceedings.

How to Protect Yourself from Future Package Delivery Scams

Prevention is far easier than recovery. Here's how to significantly reduce your risk of falling victim to UPS text scams and similar attacks:

Enable Official Delivery Notifications

Sign up for UPS My Choice at ups.com/mychoice—it's free and provides legitimate delivery notifications so you'll know when texts are actually from UPS. Similarly, create accounts with FedEx Delivery Manager and USPS Informed Delivery. When you receive official notifications, you'll immediately recognize fraudulent ones.

Verify Before You Click

Make it a habit to never click links in unsolicited text messages. Instead:

Open your browser and type the company's official website directly
Use the tracking number from the text (if provided) on the official site
Check your email for corresponding notifications—legitimate shipping updates are usually sent to multiple channels

Use Your Phone's Built-In Protections

Modern smartphones include scam detection features:

iPhone: Settings > Messages > Filter Unknown Senders (separates messages from people not in your contacts)
Android: Messages app > Settings > Spam protection (Google automatically filters suspected spam)
Enable RCS/Rich Communication Services which provides better sender verification than SMS

Install a Call and Text Filtering App

Third-party apps provide additional protection:

Truecaller: Identifies and blocks known scam numbers
RoboKiller: Uses AI to detect and block spam texts
Nomorobo: Specifically designed to block robocalls and robotexts

Reduce Your Digital Footprint

Here's the critical connection most people miss: scammers obtain your phone number from data brokers. These companies collect your personal information—phone numbers, addresses, email addresses, shopping habits—and sell it to anyone, including criminals.

Data brokers aggregate information from:

Public records (property deeds, voter registrations, court documents)
Online purchases and loyalty programs
Social media activity
Mobile apps that sell user data
Website tracking and cookies

When scammers buy these databases, they know your phone number is associated with someone who shops online, making you a prime target for fake delivery scams. Removing your information from data broker databases dramatically reduces the likelihood that scammers will target you.

The challenge is that there are thousands of data brokers, each with different opt-out processes. Manually requesting removal from even 50 brokers can take 40+ hours, and your information reappears within months as brokers repopulate their databases.

This is where automated removal becomes essential. GhostMyData scans over 2,100+ data broker sites—far more than competitors who typically cover only 35-500—and uses 24 AI agents to continuously monitor and remove your information. You can start with a free scan to see exactly where your personal information is currently exposed.

Practice Good Cyber Hygiene

Additional protective measures:

Use unique passwords for every account (use a password manager like Bitwarden or 1Password)
Enable two-factor authentication on all accounts that support it
Keep software updated as updates often patch security vulnerabilities
Be skeptical of urgency as legitimate companies rarely demand immediate action
Review privacy settings on social media to limit publicly visible information

Educate Family Members

Older adults and teenagers are disproportionately targeted by these scams. Share this information with family members and establish a protocol: "If you receive a suspicious text about a delivery, ask me before clicking anything."

Monitor Your Accounts Regularly

Check credit reports quarterly at AnnualCreditReport.com
Review bank statements weekly for unauthorized charges