If you receive an unexpected text claiming there's a problem with a package delivery, the safest move is to not click any link in it, not reply, and verify the shipment directly through the carrier's official app or website using a tracking number you already have. These messages, often called "smishing" (SMS phishing), are one of the most common scams in the US right now, and they're designed to create urgency so you tap without thinking.
Scam delivery texts usually share a few traits. They claim there's an issue with an address, a customs fee, or a failed delivery attempt, and they include a link to "reschedule" or "pay a small fee." The link often leads to a fake site that mimics USPS, FedEx, UPS, or Amazon, asking for your name, address, credit card number, or login credentials. Real carriers rarely ask you to pay a redelivery fee by text, and they don't typically send unsolicited links asking for personal or financial information this way.
Before doing anything else, check whether you're actually expecting a package. If you haven't ordered anything or don't recognize the described shipment, that's a strong sign the text is fake. If you are expecting something, don't use the link in the text at all. Instead, open a browser yourself and go directly to the carrier's official site, or use the tracking number from your original order confirmation email to check status independently.
Look closely at the sender's number and the link itself if you can see it without clicking. Scam texts often come from random phone numbers or short codes that don't match the carrier, and the web addresses are usually slightly off: extra words, odd domain endings, or a string of random characters instead of "usps.com" or "fedex.com." Many phones also show a preview of the full URL when you press and hold on the text, which lets you inspect it without opening it.
If you already clicked the link but didn't enter any information, close the page and don't go back to it; your risk is low, though it's wise to keep an eye on your accounts for a while. If you entered a password, credit card number, or other personal details, act quickly: change the password on any account where you reused it, contact your card issuer to flag or cancel the card if you entered payment info, and monitor your statements and credit reports for unusual activity.
Report the text by forwarding it to 7726 (SPAM), which flags it for major US carriers, and delete it afterward. You can also report it to the Federal Trade Commission at reportfraud.ftc.gov and to the carrier being impersonated through their official fraud-reporting page. Doing this helps providers block similar numbers and warns other people.
Going forward, get in the habit of tracking packages only through the original retailer's order page or the carrier's own app, rather than trusting links sent by text. If a message creates a sense of urgency about money, fees, or account problems, treat that urgency itself as a red flag rather than a reason to act fast.