USPS or FedEx text says your package is held up and needs $2.99 to release
A text impersonating USPS, FedEx, UPS, or DHL claims your package cannot be delivered without an updated address or a small fee. The link leads to a fake site that steals your address, phone, card number, and sometimes plants a phishing app.
Also known as: USPS smishing, FedEx delivery text scam, missed package text
Already happened to you? Do this in the next few minutes
- 1 Call your bank or card's fraud line right now. Use the number on the back of your card — not any number from the message or caller. Ask them to stop or reverse the payment and freeze the account.
- 2 If you paid by gift card, wire, or an app (Zelle, Venmo, Cash App): contact that company immediately and report it as fraud. Acting fast sometimes recovers the money.
- 3 Report to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov. The sooner, the better.
What to do right now
- 1 Do not click. Delete the text
- 2 If you are expecting a package, go to the carrier's real app or type the official URL into your browser to check its status
- 3 If you already clicked and entered card information, call your bank to dispute charges and replace the card
- 4 Forward the text to 7726 (SPAM) to report to your carrier
- 5 Report to the FTC at https://reportfraud.ftc.gov and the FBI's IC3 at https://www.ic3.gov.
Red flags
- ⚠ USPS does not send unsolicited texts asking for money to release a package
- ⚠ The link uses unofficial domains like 'usps-pkg.com', 'fedex-update.net', or random-looking shortlinks
- ⚠ Tiny fee amounts ($1.99 to $5) designed to seem too small to bother questioning
- ⚠ Pressure to act within hours or your package 'will be returned to sender'
Delivery smishing is one of the most common scam texts in the US, partly because almost everyone has a real package in transit at any given time. The scammers do not need to know what you ordered — they just need a small fraction of recipients to click.
If you receive several of these texts in a row, that is not coincidence. Scammers send these to millions of numbers at once.
If you entered payment info on a fake delivery site: contact your card issuer immediately to dispute and replace your card. Change passwords on any other account you used the same card for.
Sources
- USPIS — Postal-related text smishing scams
- FTC — Got a text from someone claiming to be USPS?
- TechCrunch — Google sues Outsider Enterprise: Chinese cybercrime ring used Gemini AI to build 9,000+ fake sites including USPS (Jun 2026)
- Google — June 2026 frauds and scams advisory: AI-powered phishing operations using Gemini to impersonate USPS and trusted brands