S.M.M.

Stop Manipulating Me · A Field Guide to Psychological Influence

ENTRY No. T24.9
CATEGORY Internet Scams
CLEARANCE Public / Essential
EDITION 01
Dossier · Manipulation Tactic

Package / Delivery Scams

Lure Fraud · Parcel Smishing · Very High
High Alert
How It WorksSEC 01

Package / delivery scams are fraudulent messages that impersonate a carrier or retailer and claim your parcel is delayed, held, or undeliverable — then steer you toward a link, a small “redelivery” or “customs” fee, or a form that captures your card and personal data. They work on a simple statistical bet: at any moment a large share of people genuinely is expecting a delivery, so an unexpected “problem with your parcel” note lands inside a plausible, expected class of notification.

The lure usually arrives by text or email carrying real-looking carrier branding, and points to a look-alike tracking or payment page. The requested amount is deliberately trivial — often a currency unit or two — because the money is rarely the point: the payoff is the card number, billing address, and sometimes ID data you enter to “release” the package, which is then monetized or resold.

Variants escalate the payload. Some pages prompt you to “install the carrier app” (sideloading malware); some route to a live “customer service” number that pivots to a phone con; some are pure data harvesting with no fee at all. The recognition constant holds across every version: an unsolicited delivery message about a shipment you cannot independently confirm, creating mild urgency and pointing to a link, fee, or number you did not initiate.

Warning SignsSEC 02
  • An order you can't match. A delivery text or email about a package you weren't tracking or can't tie to a real purchase.
  • A small "release" fee. Any request for a redelivery, customs, or handling charge — legitimate carriers overwhelmingly do not text you for small payments.
  • Look-alike links. Shortened or almost-right domains and odd URL structures instead of the carrier's real site.
  • Manufactured urgency. "Held," "final attempt," or "returns to sender today" to compress your pause.
  • Data requests on a linked page. Prompts for card, SSN, or login details after a single tap.
  • An odd sender. Long number strings, foreign numbers, or email-to-SMS gateways, with a generic greeting and no verifiable tracking number.
Frequently Paired WithSEC 03
  • Smishing · T14.9
    The primary SMS delivery vector
  • Phishing · T14.2
    Parent technique, email channel
  • Fake Support Portals · T14.22
    The look-alike landing page
  • Vishing · T14.8
    The callback "customer service" pivot
How the Scam UnfoldsSEC 04
  • Stage 01 · The Lure
    An unsolicited text or email reports a "held" or undeliverable parcel and points to a link — landing inside the everyday habit of tapping delivery notifications.
  • Stage 02 · The Fake Page
    A look-alike carrier page asks for a tiny "redelivery" or "customs" fee and your card, address, and sometimes ID details to release the package.
  • Stage 03 · The Payoff
    The captured card and identity data are monetized or resold; some variants pivot to a fake support line or a "carrier app" that installs malware.
Counter-ProtocolSEC 05
Defense: Track the parcel yourself — never from the message.
  • Don't tap the link. Track any shipment through the carrier's official app or a bookmarked site, using your own number from the original order confirmation.
  • Treat any "release fee" as a red flag. Carriers collect legitimate duties through documented channels, not surprise texts; never pay a fee from a texted link.
  • Never enter card, login, or ID data on a page reached from an unsolicited message. If unsure a shipment exists, check the retailer through your own order history.
  • Install apps only from official app stores — never sideload a "carrier app" prompted by a text.
  • Report and delete. Forward scam texts to the carrier's spam service, report to the FTC (reportfraud.ftc.gov) or IC3 (ic3.gov), and block the sender. If card data was entered, call your bank and replace the card.