A few months ago, I received a text message that looked completely legitimate. It claimed to be from a national delivery service saying that a package could not be delivered due to an “incorrect address” and that I needed to confirm my details within 12 hours or the package would be returned.
At first glance, it looked real. I do order things online frequently. But it turned out to be a scam designed to steal personal and financial information.
What Was the Scam Was Trying to Do?
- Get users to enter personal details (name, address, phone number)
- Capture login credentials (email/password combinations)
- Potentially steal payment information (credit card data)
How the Scam Worked
1. Creating urgency
“Your package will be returned in 12 hours if not verified.”
This pressure tactic is meant to make people act quickly without thinking.
2. Impersonating a trusted brand
The message used branding similar to a well-known delivery company, including:
- A logo in the link preview
- A realistic-looking URL that was slightly altered
3. Fake tracking link
The text included a link that looked like a tracking page. Once clicked, it led to a very convincing fake website that copied the real company’s design.
4. Data collection form
- Full name
- Home address
- Phone number
- Credit card “for redelivery fees”
How I Realized It Was Fake
- I wasn’t expecting any package at that time
- The link domain was slightly off (not the official company website)
- The message came from a random phone number instead of an official short code