As the holiday season approaches, millions of people are turning to online shopping for their gifts, making it a prime time for scammers to take advantage of unsuspecting buyers. One of the most common schemes to watch out for is the “delayed delivery” scam, which is expected to surge over the coming weeks. Here’s what you need to know to protect yourself and your loved ones.
How the Scam Works
The “delayed delivery” scam typically starts with a text message or email that appears to be from the U.S. Postal Service (USPS) or another delivery service. The message claims there’s an issue with delivering a package you ordered—often citing “missing information.”
You’re then directed to click a link to update your delivery details. Once you click, you’re asked to provide personal information like your full name, address, date of birth, or even payment details. Unfortunately, the scammers are not fixing your delivery issue—they’re stealing your information.
Why the Scam Peaks During the Holidays
Online shopping skyrockets during the holiday season, with millions of packages in transit daily. Scammers know that many people are already expecting deliveries, making it easier to catch their targets off guard.
These scams gained momentum during the COVID-19 pandemic when online ordering became the norm. Now, as the holiday season gets into full swing, scammers are doubling down on their efforts to trick busy, distracted shoppers.
Spotting the Red Flags
The good news is that this scam is easy to detect if you take a moment to evaluate the message critically. Here are some common signs of a “delayed delivery” scam:
The Story Doesn’t Add Up
- Why would the USPS or a delivery company need more information to deliver your package when they deliver mail to your house every day?
- How would the USPS know your cellphone number but not your address? These inconsistencies are your first clue that the message is likely a scam.
Random Targeting
- Scammers send these messages to random phone numbers, hoping some recipients are expecting a package. Their odds improve during the holidays, but the messages are rarely personalized or specific.
Suspicious URLs in Emails
- If the scam comes via email, examine the sender’s email address and the link they ask you to click. Even if the email looks professional and includes a delivery service logo, the URL often reveals it’s not from the legitimate company.
- For USPS, any official communication will use a domain ending in usps.com. If it doesn’t, it’s a scam.
How to Protect Yourself
Don’t Click Links in Unsolicited Messages
- Whether it’s a text or an email, avoid clicking on any links that claim there’s an issue with your delivery. These links often lead to fake websites designed to steal your information.
Verify Directly with the Delivery Service
- If you’re genuinely concerned about a package, contact the delivery company directly. Use their official website or customer service number to check the status of your delivery.
Watch for Spelling and Grammar Mistakes
- Many scam messages contain subtle errors in spelling, grammar, or formatting. These are red flags that the message is not from a professional organization.
Be Skeptical of Urgent Requests
- Scammers often try to create a sense of urgency to pressure you into acting quickly without thinking. Take your time and verify the legitimacy of the message.
Enable Spam Filters and Security Features
- Use your phone or email provider’s spam filters to reduce the number of fraudulent messages that reach you. Keeping your devices updated with the latest security software can also help block malicious links.
What to Do If You’ve Been Targeted
If you suspect you’ve received a “delayed delivery” scam message:
- Don’t Respond: Ignore the message and do not engage with the sender.
- Report It: Forward scam texts to 7726 (SPAM) or report emails to the Anti-Phishing Working Group at reportphishing@apwg.org.
- Monitor Your Accounts: If you accidentally provided personal information, monitor your financial accounts for suspicious activity and consider freezing your credit to prevent identity theft.
- Change Your Passwords: If you shared login credentials, update your passwords immediately.
A Reminder for the Holidays
The holidays are a busy time, and it’s easy to get caught up in the excitement of receiving packages and gifts. Scammers are counting on this distraction to slip through the cracks, so stay vigilant.
Remember, legitimate delivery services like USPS, FedEx, or UPS will never ask for sensitive personal information via text or email. By staying cautious and taking a moment to think critically, you can avoid falling victim to these schemes and keep your holidays joyful and scam-free.
Stay safe, and happy holidays!
