Fake Delivery Texts This Holiday Season: How to Spot and Stop Them

From now through the new year, most of us are waiting on at least one package. Scammers know that too. This is the busiest time of year for fake texts that look like they come from a shipping company, an online store or your bank, all hoping you'll tap a link without thinking twice.

The good news is that these messages follow a pattern. Once you know what to look for, they're much easier to spot. Here's what we at We Fix Phones N More tell customers who ask about them.

What Fake Delivery Texts Usually Look Like

Most scam texts try to create a small, urgent problem that only you can fix by tapping a link. Common examples include:

"Your package could not be delivered due to an incomplete address. Update here."
"A redelivery fee is required before your parcel can be released."
"Your order has been placed on hold. Confirm your payment details."
"Unusual activity on your account. Verify now or it will be locked."

Red flags to watch for

You weren't expecting anything from that company, or the text doesn't name what you ordered.
The link looks odd. It may be a long string of random letters, a misspelled company name or an unfamiliar web address.
It asks for money or card details for a small "fee." Real carriers don't text you asking for a redelivery payment through a link.
It pushes you to act fast, with warnings that your package will be returned or your account closed.
It comes from a random phone number or email address instead of a short code you've seen before.

The Safest Way to Check a Delivery

You never need to use the link in a text to check on a package. Instead:

Open the store's app or website yourself and look at your order history.
Use the tracking number from your original order confirmation email.
Type the carrier's web address into your browser directly rather than tapping a link.

If the order looks fine there, the text was almost certainly a scam.

What to Do If You Already Tapped the Link

It happens to careful people all the time. Don't panic. What you should do depends on how far you went.

If you only opened the page

Close the browser tab and don't enter anything. Clear your browser history and website data for good measure, and keep your phone's software up to date so known security holes are patched.

If you entered a password

Change that password right away, starting with your email account, since email is the key to resetting everything else. If you reuse the same password anywhere, change it there too. Turn on two-step verification wherever it's offered.

If you entered card or bank details

Call your bank or card company using the number on the back of your card. Tell them what happened so they can watch for fraud or issue a new card. Keep an eye on your statements for the next few weeks.

If you downloaded something

Delete any app you don't recognize, especially one installed right after tapping the link. On Android, be wary of anything that asks for accessibility or device administrator permissions. If your phone starts acting strangely, with pop-ups, fast battery drain or apps you didn't install, it's worth having it looked at.

How to Cut Down on Scam Texts

Turn on spam filtering. iPhones can filter messages from unknown senders into a separate list, and most Android phones have spam protection built into the messages app.
Report and delete. Use the "Report Junk" or "Report spam" option in your messages app. You can also forward scam texts to 7726 (SPAM), which reports them to most U.S. carriers.
Never reply, even with "STOP." Replying confirms your number is active.
Talk to family members, especially older relatives and kids with their first phones. A two-minute conversation can save a lot of trouble.

Scams also show up on computers as alarming pop-ups. Our post on what to do about a scary virus pop-up covers that side of things. And if your phone is ever lost or stolen, our guide to protecting a lost or stolen phone walks you through securing your accounts.