Delivery/Refund Scams
What it is (1-liner)
Texts/emails or calls pretending to be USPS/UPS/FedEx (or a retailer) that push you to click, pay a "postage/refund fee," or share login/credit info.
Red flags (top 5)
"Package held/failed delivery—pay $1.50 postage" links.
Look-alike tracking pages and short URLs.
"Refund available—click to claim" texts (Amazon/retailer).
Sender address isn't an official domain; odd grammar.
Requests for gift cards/crypto or direct bank info.
Do this now (60-second checklist)
Don't click/scan. If it might be real, go directly to your retailer account or the shipper's official site/app to check orders.
Report the text: forward to 7726 (SPAM).
USPS phishing: forward to spam@uspis.gov; then delete.
If you entered info or paid: change that password, turn on 2FA, call your bank/card issuer to dispute, and file ReportFraud.ftc.gov + FBI IC3.
Report & support
FTC: Report scams at ReportFraud.ftc.gov.
FBI IC3: File internet-crime reports (helps with takedowns/recovery).
APWG (email phishing): forward to reportphishing@apwg.org.
UPS: use their fraud page or email fraud@ups.com.
FedEx: see FedEx fraud page; you can forward to abuse@fedex.com.
Mental health & immediate safety
Feeling duped happens to smart people—breathe and take the steps above. If anxiety spikes or you feel unsafe: Call/Text 988 (24/7).
Scripts you can copy
To your bank/card: "I responded to a delivery/refund text that was phishing. Please block the charge, monitor the account, and issue a new card if needed."
To a friend/family chat: "Heads-up: fake 'postage due/refund' texts going around. Don't click—check your orders in the app."
Lock down & recover
Change passwords on affected retailer/shipping accounts; enable 2FA/passkeys.
Review email filters/forwarding rules in case of compromise.
Watch statements for new charges and dispute fast.
Platform-specific steps
Gmail: use Report phishing on the message.
Outlook: Report ▸ Report phishing (web/mobile).
USPS: see scam alerts + reporting instructions.
UPS/FedEx: don't use numbers in messages; contact via official sites.
Printable Quick Card (1-page content)
Don't click/scan. Check orders in retailer app/site → Forward SMS to 7726 → USPS to spam@uspis.gov → Change password + 2FA → Bank dispute → ReportFraud + IC3.
FAQs
Are tiny "postage due" fees ever real? Scammers use small fees to capture cards and logins—verify shipments in your account, not via links.
Can QR codes be part of this? Yes—QRs can hide phishing URLs or malware; avoid codes from unsolicited messages/packages.
Who else should I notify? Forward phishing emails to reportphishing@apwg.org to aid global takedowns.
Last updated: Sept 28, 2025 • Reviewed by: ZoraSafe Safety Team