The Anatomy of a Delivery Scam
Fake delivery notifications, a type of scam known as 'smishing' (SMS phishing), have become one of the most common threats faced by online shoppers. Cybercriminals exploit the simple fact that most people are expecting a package, making their fraudulent
messages feel plausible. These scams surge during festive periods when shopping volumes are high and people are often distracted, making them more likely to click without thinking. Fraudsters send a text message or email impersonating a well-known delivery service like FedEx, UPS, or a major e-commerce platform. The message typically claims there's an issue with a delivery—such as a failed attempt, an incomplete address, or a customs fee that needs to be paid—and urges you to take immediate action.
Red Flags to Watch For
While scammers are becoming more sophisticated, their messages often contain tell-tale signs. Be on high alert if you see urgent language demanding immediate action, such as "your package will be returned" or "click here immediately". Spelling mistakes or awkward grammar are another classic red flag. Legitimate companies proofread their communications carefully. Most importantly, be suspicious of any message that contains a link and asks for personal or financial information. Reputable delivery services will not ask for sensitive details via a text message. In India, the Indian Cyber Crime Coordination Centre (I4C) has specifically warned about courier impersonation scams designed to trick people. Unexpected requests for payment, no matter how small, should be treated with extreme caution, as this is a common tactic to harvest your credit card details.
What the Scammers Want
The ultimate goal of a fake delivery message is to trick you into revealing sensitive information. The malicious links in these texts often lead to convincing-looking but fake websites designed to steal your data. Scammers may be after your personal details for identity theft, your online banking login credentials, or your credit card numbers. In other cases, clicking the link can install malware on your device, which can steal information in the background or lock your device until you pay a ransom. According to the I4C, some scams even instruct users to dial special codes that activate call forwarding, rerouting your incoming calls—including verification calls from banks—to the fraudster's number.
Your Action Plan for Staying Safe
If you receive a suspicious delivery message, the most important rule is to not click any links, open any attachments, or call any numbers provided. Do not reply to the message, as this confirms your number is active. Instead, block the sender. If you are genuinely expecting a package and are concerned about its status, visit the official website of the retailer or courier company directly by typing the address into your browser. Use the official tracking number you received when you placed your order to check for updates. Legitimate delivery companies typically do not send unsolicited texts with links, and they will not charge a fee for redelivery. For added security, only use official apps downloaded from reputable app stores for your shopping and tracking.
Reporting and Recovery
If you suspect you've encountered a scam, you can report it. In India, you can report cybercrime incidents to the National Cyber Crime Reporting Portal at cybercrime.gov.in or by calling the helpline number 1930. Forwarding suspicious text messages to your mobile provider may also help them block scammers. If you have already clicked a link or provided your details, act immediately. Contact your bank to report potential fraud on your accounts, freeze your cards if necessary, and change the passwords for any compromised online accounts. The faster you act, the better your chances of minimizing any potential damage from the scam.
