Safe to Tap

Scam alerts

Package delivery texts: "your package is on hold"

Updated November 3, 2026

Scammers pretend to be USPS or another delivery company and say a package couldn't be delivered, or that you need to update your address or pay a small fee. The link leads to a fake page that collects your personal and card details. It works because most of us are expecting a package.

Example written by us, based on the warnings below. Real messages vary: the amounts, names and links change all the time.

Warning signs

• You didn't ask for text updates with a tracking number. The Postal Inspection Service says USPS only texts you after you've asked for tracking updates, and those texts don't contain links.
• It asks for a fee, your card details or your address to "release" or redeliver a package.
• A deadline: "within 24 hours" or "it will be returned".
• The link's address isn't usps.com (or the delivery company's real site), even if it has "usps" in it.

What to do

• Don't tap the link or reply.
• Track packages yourself on the delivery company's official app or website, using the tracking number from your order.
• If you entered card details, call your bank right away. The Postal Inspection Service advises telling your bank even if you only opened the page.
• Report it: forward the text to 7726 (SPAM). For texts pretending to be USPS, also email the message to spam@uspis.gov (copy the text; don't tap the link).

Sources

• U.S. Postal Inspection Service: Smishing, package tracking text scams
• FTC: Don't click on that random text. It's a scam