Your Package Couldn't Be Delivered—Or So the Text Said

Could This Happen to You? A Wright to Learn Scam Story

********************

The people in this story are fictional, but the scam tactics are based on real scams reported to consumer protection agencies. The details may be invented, but the warning signs—and the lessons—are very real.

********************

Becky glanced at her phone while waiting in the checkout line at the grocery store. A new text message had come in:

USPS: We were unable to deliver your package due to an incomplete address. Please update your information within 24 hours to avoid the package being returned.

A link appeared underneath.

Her first thought was that it was strange. Her second was that she had ordered a birthday gift for her grandson just three days earlier.

The line moved forward, and someone behind her was unloading groceries onto the belt. Becky put her phone back in her purse. She'd deal with it when she got home.

That afternoon, she noticed the message again.

This time, she clicked.

The website looked convincing. It had the familiar USPS logo and colors, along with information explaining that her package couldn't be delivered because there was a problem with the address. To schedule redelivery, she would need to confirm her information and pay a small processing fee: $1.95.

Becky was annoyed, but not particularly suspicious. She'd had packages delayed before, and $1.95 didn't seem like an amount anyone would bother trying to steal.

She entered her address and credit card information and tapped Submit.

Instead of a confirmation page, an error message appeared.

Transaction Failed. Please Try Again.

Maybe she'd mistyped something. Becky checked the information, entered it again, and got another error.

Frustrated, she closed the page. She'd figure it out tomorrow.

The Next Morning

Becky stopped for coffee on her way to meet a friend. As she was waiting for her order, her phone buzzed with an alert from her credit card company asking whether she recognized an $842.17 purchase.

She didn't.

This time, Becky didn't use a phone number or link from the alert. She pulled the credit card from her wallet, called the number printed on the back, and spoke with a representative.

There were several transactions she didn't recognize. The representative explained how to report the charges as fraudulent, canceled the compromised card, and arranged for a replacement.

Becky was relieved she'd caught the problem quickly, but she was also confused. How had someone gotten her card information?

The representative asked whether she'd recently entered the card number somewhere online.

Then Becky remembered the package.

The text message. The $1.95 fee. The error messages.

What had looked like a failed payment hadn't necessarily failed at all. The fake website hadn't needed to successfully charge her $1.95. The scammers had gotten what they really wanted: the information she'd typed into the form.

"But I Really Was Expecting a Package"

A few days later, Becky attended a technology class at her local library. When the conversation turned to online scams, she hesitated before sharing what had happened.

"I always thought I was pretty careful," she told the group. "I don't usually click strange links. But I really was expecting a package."

Several people nodded.

Someone else had received a fake delivery message supposedly from FedEx. Another person had gotten one claiming to be from UPS. One participant said she'd almost followed a similar link but happened to notice that the website address looked strange.

As the group talked, Becky began to see the experience differently. The scam hadn't worked because she knew too little about technology or because she'd been careless. It worked because the message happened to make sense in the context of her life.

She really was expecting a package. The website really did look familiar. The requested fee really was small enough to seem routine.

The scammer didn't need to know any of those things about Becky personally. They just needed to send the same message to enough people. Some of them were bound to be waiting for a delivery.

Let's Break It Down

Several details made this scam particularly convincing.

The timing felt right

Package-delivery scams work partly because so many of us shop online. A scammer doesn't necessarily know that you've ordered something. If the same message goes to thousands of people, plenty of recipients will happen to be waiting for a package when it arrives.

For Becky, that coincidence gave the message instant credibility.

The website looked legitimate

A familiar logo isn't proof that a website belongs to the organization it claims to represent. Logos, colors, fonts, and other design elements can be copied.

A better clue is the website address itself. Scammers may use addresses that resemble the real company's URL but include misspellings, extra words, unusual characters, or an unfamiliar domain.

The amount seemed too small to be a scam

The $1.95 fee served an important purpose: it made the request feel ordinary.

Becky probably would have stopped immediately if the website had asked her to pay $500 to release her package. But a couple of dollars? That felt plausible.

And the small charge wasn't necessarily the real goal. The payment form gave the scammers something far more valuable: Becky's card information and other personal details.

The message created urgency

Becky was told she needed to act within 24 hours or the package would be returned.

That deadline encouraged her to solve the problem rather than investigate it. Creating urgency is a common scam tactic because people are more likely to overlook warning signs when they feel they need to act quickly.

What to Do If You Get a Text Like This

An unexpected delivery message doesn't automatically mean it's a scam. Packages really do get delayed, addresses really do cause problems, and shipping companies really do send notifications.

The safest response is to verify the message without using the link it provides.

If you're expecting a package, open the retailer's or shipping company's app yourself, or type the company's official website address into your browser. If you have a tracking number from your original order confirmation, use that to check the delivery status.

You can also ask yourself a few questions before acting:

• Was I expecting this particular company to contact me?

• Does the message pressure me to act immediately?

• Is it asking me to provide payment or personal information?

• Does the website address actually belong to the company it claims to be?

And if you're unsure, it's okay to do nothing for a while. A legitimate delivery problem can still be investigated after you've taken a few minutes to verify it.

What to Do If You Already Clicked and Entered Your Information

Sometimes we recognize a scam only after we've responded to it. If that happens, the goal shifts from prevention to taking action quickly.

If you entered credit or debit card information, contact the card issuer or financial institution using the number printed on your card or listed on its official website. Explain what happened and ask what steps they recommend. That may include replacing the card, reviewing recent transactions, and disputing unauthorized charges.

If you entered a username or password, change that password immediately on the real website. If you've used the same password for other accounts (though the best practice is to never reuse the same password), change it there too. Turn on two-factor authentication where it's available.

Continue monitoring your accounts for activity you don't recognize. Depending on what information you provided, you may also want to take additional identity-protection steps.

You can report scams and learn about recovery steps through the Federal Trade Commission at ReportFraud.ftc.govand IdentityTheft.gov.

Most importantly, don't let embarrassment keep you from acting or telling someone what happened. Scam messages are deliberately designed to seem believable. Reporting your experience quickly can help limit the damage—and talking about it may help someone else recognize the same scam.

Bottom Line

It would be easy to finish Becky's story with a lesson like "Don't click links in text messages."

But that isn't quite enough.

Scams change. The next message might not be about a package. It might claim to come from your bank, a streaming service, a toll road, a government agency, or someone you know.

A more useful habit is to recognize the moment when a message is asking you to act—click this link, pay this fee, confirm this password, call this number—and pause before you do.

Instead of asking only, Does this look real?, ask:

Can I verify this another way?

That small change puts you back in control.

Digital Resilience Takeaway

The skill: Pause and verify independently.

Why it matters: Scammers often create situations that feel familiar and urgent. Taking even a moment to move outside the message—by opening an official app, visiting a website yourself, or calling a trusted number—can interrupt the scam.

Try this: The next time you receive an unexpected text asking you to click, pay, sign in, or provide information, don't respond from the message. Find another way to verify what it's telling you first.

Continue Building Your Digital Resilience

You don't need to memorize every scam to become safer online. Building a few strong habits can help you recognize suspicious situations even as scam tactics change.

Wright to Learn's digital safety and privacy classes offer practical, judgment-free opportunities to learn about scams, privacy, passwords, account security, and other everyday digital safety skills.

Learn how to spot phishing texts, fake websites, and other common scams in one of our digital safety and privacy classes.