Fake UPS Delivery Texts & Emails: How to Spot a UPS Scam

Got a UPS delivery text or email you weren’t expecting? Treat it as fake until you prove otherwise. The most reliable test takes fifteen seconds and never involves tapping the link: copy the tracking number out of the message, open ups.com yourself, and paste it in. A real shipment shows a real history; a fake one shows nothing. Everything else here — red flags, wording patterns, reporting addresses — is detail around that one habit.

What Is a Fake UPS Delivery Notification?

A fake UPS delivery notification is a text, email, or automated call impersonating UPS to get something from you — usually a payment, a card number, a password, or enough personal detail to open credit in your name. It is a phishing attack wearing a shipping company’s uniform: the logo, the tracking-number-shaped string of characters, the “your package is on hold” phrasing — all of it is costume.

They work on timing, not sophistication. Most people have something in transit most of the time, so a message saying a delivery needs attention lands in a mental slot that is already open — and the scammer only needs you to act before you think. That is why these messages almost always carry a deadline: the package will be returned, the fee expires today, the address must be confirmed by tomorrow.

UPS describes the pattern on its official fraud protection page: fraudulent communications may say a package is waiting to be delivered, then ask for personal information or advance payment before you receive it. None of that is how UPS operates. For the legitimate side of the picture, start at our UPS shipping guide.

How Do You Tell If a UPS Text or Email Is a Scam?

You don’t need to be a security expert. Six checks catch nearly everything, and you can run them without leaving your lock screen.

1. It asks for money

This one ends the conversation. UPS does not collect redelivery fees, customs charges, or “package release” payments by text link. If a message wants your card to move a parcel along, it’s a scam. The FTC flags the small-fee redelivery trick specifically: it looks too trivial to question while capturing a full card number.

2. The link does not go to ups.com

UPS calls this a deceptive link: text that appears to point at a safe site while sending your browser elsewhere. On a computer, hover and read the destination in the status bar; on a phone, press and hold to preview the URL instead of tapping. The real domain is the part immediately before the first single slash — so ups.com.tracking-update.example is not a UPS link at all.

3. There is no tracking number, or it does not resolve

UPS says a legitimate representative contacting you about a package can always give you a tracking number you can verify on the UPS website. Fakes often skip the number, or include a random string that looks close enough at a glance and goes nowhere when you paste it into ups.com.

4. You never signed up for alerts

UPS delivery texts are opt-in — they arrive because you enrolled in UPS My Choice or asked for updates on a shipment. A cold text about a package you didn’t order, from a company you never gave your number to, isn’t a notification. It’s bait.

5. The message is vague about what the package is

Scammers don’t know what you ordered, so they can’t say. Real notifications reference a specific shipment tied to your account. Fakes say “your parcel,” “your item,” “your delivery” — generic language that works no matter who receives it.

6. Something in the presentation is slightly off

UPS lists design flaws among its fraud indicators — distorted or oddly sized logos are a classic tell. Add awkward grammar, odd capitalization, and sender addresses with a real brand name buried inside a domain that isn’t the brand’s. Treat this as supporting evidence, not the whole case: a perfectly written message asking for payment is still a scam.

Real UPS vs. Fake UPS: What Changes and What Doesn’t

The whole comparison in one place — screenshot it, or send it to whoever keeps asking you about these texts.

Signal	Real UPS notification	Fake UPS notification
Sender	A registered short code for texts, or an email address on a ups.com domain	A random 10-digit mobile number, an overseas number, or a free webmail address with “ups” in the display name
Links	Point to ups.com; the domain sits immediately before the first single slash	Lookalike domains, hyphenated variants, URL shorteners, or brand names buried in a subdomain
Urgency	Informational — delivered, out for delivery, delayed. No countdown	A deadline. Package returns today, fee expires in hours, confirm within 24 hours
Payment requests	Never. UPS does not request payment in unsolicited messages to release a package	A small redelivery, customs, or handling fee, payable by card on a linked page
Grammar and design	Consistent branding, clean copy, correctly rendered logo	Distorted or resized logos, odd capitalization, spacing errors, stilted phrasing
Tracking number	Present and verifiable at ups.com; typically an 18-character number beginning with 1Z	Missing, or a random string that returns no results when you check it yourself
Why you got it	You opted in via UPS My Choice or requested alerts on a shipment	Unprompted, for a package you never ordered or shipped

What Do UPS Scam Texts Usually Say?

The wording rotates constantly, but the underlying scripts are few. Learn the shapes and the phrasing stops mattering. We describe patterns rather than reproduce live scam messages — quoting one verbatim, number and domain included, just gives the campaign another place to live.

• The address problem. Your package couldn’t be delivered because the address is incomplete; confirm details at a link. The page collects your address, phone, and often a card “for verification.”
• The small fee. A modest charge — customs, handling, redelivery — is blocking your parcel. The amount is deliberately small so the request feels routine. The target is the card number, not the fee.
• The reschedule. A delivery attempt failed and you need a new time slot. The scheduling page asks you to log in, which is how credentials get harvested.
• The package you never ordered. A shipment is on its way and you should click to review or cancel it. Curiosity and alarm push toward the same tap.
• The refund. A shipping charge was overpaid and you’re owed money back — just enter your card so it can be credited. Refund framing lowers your guard because nothing appears to be at stake.
• The QR code. Increasingly the payload is a QR code rather than a tappable link, because a code hides its destination until you’ve already scanned it.

Package-delivery impersonation is among the most reported text scam categories the FTC tracks, for a simple reason: the message costs nothing to send and only has to work occasionally. Don’t read your own near-miss as carelessness.

Does UPS Actually Send Delivery Texts?

Yes — which is exactly why the fakes work. UPS runs a genuine notification service through UPS My Choice, and you can request alerts for an individual shipment from a tracking page. Enrolled members get texts and emails about packages out for delivery, delivered, delayed, or awaiting a signature.

The distinguishing feature isn’t the wording — it’s the origin. Real UPS texts arrive because you opted in, and they come from registered short codes, the five- and six-digit numbers businesses use for automated messaging, rather than an ordinary mobile number. UPS publishes its current short codes in the terms for text alerts; that list can change, so check it on ups.com rather than trusting a number you read in an article, including this one.

Real UPS emails behave the same way: they come from a ups.com domain, reference a specific shipment you can find in your account, and link only to ups.com. What they never do is ask you to send money, confirm a password, or reply with personal details in order to receive a delivery. UPS’s fraud guidance is unambiguous — it does not request payments, personal or financial information, account numbers, IDs, passwords, or invoice copies in unsolicited communications, by any channel.

A useful shortcut: a genuine notification tells you something. A fraudulent one asks you for something.

How Do You Check If a UPS Tracking Number Is Real?

Start with the shape of the number. The standard UPS format is 18 characters beginning with 1Z: a six-character shipper account number, a two-character service code, and an eight-character package identifier ending in a check digit. That check digit is why a randomly typed string usually fails validation before it reaches the tracking database. UPS uses other formats for specific services, so a number that doesn’t start with 1Z isn’t automatically fake — our breakdown of the UPS tracking number format covers each one.

Then verify it the only way that counts. Open a new tab, type ups.com yourself, and paste the number into the tracking field — not a link, a search ad, or an unfamiliar tracking app. Three outcomes are possible:

• No results. It’s a fake UPS tracking number, and the message is fake with it.
• A real shipment that isn’t yours — wrong origin, wrong destination, delivered weeks ago. Scammers recycle valid numbers scraped from elsewhere. Still fake.
• Your actual package, with a history matching what you ordered. The shipment is real — but that doesn’t make the text real. Check it in your UPS account or the retailer’s order page before acting on anything the message asked for.

If the question is whether something was actually delivered rather than whether a message is genuine, that’s a different tool: UPS can supply delivery confirmation details, and sometimes a signature image, through its proof of delivery process. Requesting it from UPS directly beats trusting a “delivery receipt” attached to an email.

This cuts both ways for senders. Labels bought through ParcelPath produce genuine UPS tracking numbers you and your recipient can verify at ups.com like any other UPS shipment — so when a customer asks whether the number you sent is real, they can check it themselves.

What Should You Do If You Clicked a Fake UPS Link?

First: a tap is not a catastrophe. Loading a phishing page does not by itself hand over your accounts. What matters is what happened next. Work through this in order.

1. Stop and enter nothing. Close the tab; don’t fill in the form “just to see.” If a file downloaded, delete it without opening it.
2. If you entered a password, change it now — and anywhere else you reused it, which is usually the real exposure. Start with email and turn on two-factor authentication, since email is the reset path for everything else.
3. If you entered card details, call your bank using the number printed on the card, not one from a search. Ask them to freeze the card and issue a new number; most will do it while you’re on the line.
4. If you sent a payment, tell your bank or the payment app immediately and ask about a reversal. Speed matters most here — same-day reports do meaningfully better than next-day ones.
5. If you gave up personal details like a Social Security number or date of birth, place a free fraud alert or credit freeze with the three credit bureaus. IdentityTheft.gov generates a recovery plan.
6. Watch your statements for a few weeks. Card testing often starts with one small transaction before anything larger. Turn on transaction alerts if your bank offers them.
7. Update and scan your device, and delete any profile or app the page prompted you to install.

If you simply looked at the page and did none of the above, you’re almost certainly fine. Delete the message, block the sender, and move on.

How Do You Report a UPS Scam?

Reporting takes a couple of minutes and genuinely helps — it’s how lookalike domains get taken down and how agencies map a campaign.

• The UPS fraud team: forward the suspicious email, or a screenshot of the text, to fraud@ups.com. UPS also maintains a fraud protection page with current guidance.
• Your mobile carrier: forward the text to 7726 (it spells SPAM). Free on major US carriers, and it feeds network-level spam filtering.
• The FTC: file at ReportFraud.ftc.gov. Reports can be anonymous, and the FTC uses them to identify trends.
• The FBI: file with the Internet Crime Complaint Center at ic3.gov, especially if you lost money.
• Identity theft recovery: if personal information was exposed, use IdentityTheft.gov.
• Your phone’s built-in tools: report as junk and block the sender in iOS or Android Messages.

Report even when nothing was lost — report volume is what makes a campaign visible enough to act on.

Frequently Asked Questions

Is a UPS text a scam?

Not always — UPS sends genuine delivery texts to people who opted in through UPS My Choice or requested alerts on a shipment. But an unprompted text is suspicious by default, and any text asking for payment or personal information to release a package is a scam.

Does UPS charge a redelivery fee by text?

No. UPS does not send unsolicited messages asking for payment to release or redeliver a package. The “small outstanding fee” text is one of the most common delivery scams in circulation, and the fee is only a pretext for capturing your card number.

What happens if I clicked a link in a fake UPS text?

If you only opened the page and entered nothing, you’re very likely fine — close it, delete the message, block the sender. If you typed a password, change it everywhere you reused it and enable two-factor authentication. If you entered card details, call your bank using the number on the card.

How do I know if a UPS tracking number is fake?

Type ups.com into your browser directly and paste the number into the tracking field. No results means it’s fabricated; a shipment unrelated to you means the number was scraped elsewhere. Standard UPS tracking numbers are 18 characters starting with 1Z, though some services use other formats.

How do I report a fake UPS email or text?

Forward the email, or a screenshot of the text, to fraud@ups.com, and forward the text itself to 7726 to alert your carrier. File with the FTC at ReportFraud.ftc.gov, and with the FBI’s IC3 at ic3.gov if money was lost.

What does a real UPS text message look like?

It comes from a registered short code rather than an ordinary mobile number, references a tracking number you can verify at ups.com, links only to ups.com, and arrives because you enrolled in alerts. It tells you a delivery status — it doesn’t collect payments, passwords, or address confirmations.

Can scammers create a fake UPS shipping label?

Fraudulent or invalid labels do circulate, usually as PDF attachments in phishing emails or labels bought with stolen payment details. A label only means something if its tracking number resolves at ups.com. Never open an unexpected label attachment — that’s a common way malware arrives.

Why do I get UPS texts when I never ordered anything?

Because the sender doesn’t know whether you ordered anything. These campaigns blast enormous lists of numbers at random, betting some recipients are waiting on a package. Getting one doesn’t mean your accounts were breached or your information leaked.

Does UPS ever call about a package?

A UPS driver or representative may call about a real delivery, and UPS says its representatives can always provide a verifiable tracking number. What won’t happen on a genuine call is a request for payment, credentials, or financial details. If a caller asks, hang up and contact UPS through ups.com.

Part of our UPS shipping guide. Related: UPS Tracking Number Format · UPS Proof of Delivery.