UPS text scam – I clicked on the link; what can I do?

UPS text scams are designed to create urgency with fake delivery issues, tracking problems, or missed package notices that push people to click before they think. This guide explains what to do after clicking, how to tell whether your device or data may be at risk, and which steps matter most if the message was really a phishing attempt.

Key Takeaways

UPS phishing texts usually impersonate delivery alerts and pressure recipients to click a link to “reschedule,” “confirm,” or “fix” a package issue.
Clicking alone may not always mean full compromise, but the risk rises sharply if you entered credentials, payment details, or downloaded anything from the linked page.
The right response depends on what happened next: close the page, clear browser data, run a security scan, change passwords if you logged in, and monitor financial accounts if you shared card details.
Legitimate package issues should always be checked by going directly to the carrier’s official website or app instead of trusting links sent by text.

Text scams, which often disguise themselves as legitimate messages from trusted companies, financial institutions, or government agencies, are designed to trick you into clicking malicious links or divulging sensitive information. The consequences can range from financial losses to identity theft and even malware infections.

Bitdefender research conducted between September and December 2023 has shed light on the alarming prevalence and impact of SMS text scams worldwide.

According to the findings, most malicious messages were about package deliveries, followed by banking, government, social media, and other platform accounts, and fake prizes.

The research revealed that:

Attackers have taken in around $40 million in just three months.
Around 15% of SMS recipients will result in a person clicking a URL.

In this article, we focus on UPS scam texts. However, the red flags and tips for staying safe apply to any delivery message received from major shipping carriers such as UPS, FedEx, DHL, and national post offices.

What is a UPS text message scam, and how it works

UPS text scams involve scammers sending fake text messages pretending to be from UPS regarding a delivery. These messages typically contain phony tracking numbers, false claims about a "missed" or "rescheduled" delivery, and a link to arrange a new delivery date.

The 4 most common UPS text scams

1. Fake missed delivery notification

One of the most widespread UPS text scams claims that you missed a delivery and need to reschedule. Even if you didn't order anything, scammers hope you'll be curious enough to click the link.

These texts may include bogus tracking numbers or mention "redelivery costs," but the goal is to get you to click. If the text doesn't have your name, address, or a legitimate tracking number (that you can verify on the official UPS website), it's likely a scam. Also, be wary of links that appear to be UPS-related but don't lead to the real UPS.com domain.

2. "Delivery fee" notifications

In this scam, fraudsters create a sense of urgency by claiming you owe a "delivery fee" to receive your package - a customs fee or other payment before delivery.

If you click the link, you'll be taken to a fake website mimicking UPS, where any information you provide (credit card, address, SSN, etc.) will be stolen.

Legitimate UPS won't send payment links via text or ask you to submit sensitive data this way. Also, check that any tracking numbers provided actually work on the real UPS.com website.

3. "Incomplete address for delivery" notification

Scammers ask that you "verify" or fill in your details before delivering. They'll request your name, phone number, address, and sometimes even your Social Security number (SSN) and credit card numbers. Any information you provide goes straight to the scammers.

These fake sites may use UPS branding, colors, and URLs that appear associated with UPS to seem legitimate. However, the domain won't be UPS.com, and they'll often ask for excessive information that UPS wouldn't require just to "find" a delivery. Never enter sensitive data on suspicious sites.

4. Malware infection attempts

In some cases, hackers hide malware in the links sent via UPS text scams. If you click, your device could become infected, giving scammers access to your data, camera, microphone, and more. They may even hold your device for ransom.

Be very cautious about clicking any strange links, especially if they pressure you to do so. Verify the legitimacy of shipping notifications directly with UPS before clicking links.

How to identify a UPS text scam

Here are some red flags you can look out for to identify a UPS text scam:

• You're not expecting a package delivery. Scammers send these messages randomly, hoping to catch recipients who aren't actively awaiting a shipment. If you haven't ordered anything, be skeptical.

• Unsolicited messages with links. UPS typically only sends texts if you've requested delivery updates for an active shipment. Be wary of unexpected links.

• A sense of urgency or scare tactics. Scammers often try to pressure you into quick action by claiming you'll miss the delivery or owe money if you don't act immediately.

• Requests for payment to receive your package. While you may need to pay legitimate fees sometimes, UPS won't ask for money via unsolicited texts or non-official channels like gift cards or crypto.

• Fake tracking numbers provided. Always verify any tracking numbers on the official UPS.com website before taking action.

• Links leading anywhere other than UPS.com. Scammers use deceptive URLs mimicking the real UPS site. But if it doesn't go to the official UPS.com domain, it's likely malicious.

• Strange phone numbers calling or sending texts. In the U.S., legitimate UPS texts should only come from 94601, 69877, 48515, or 52892, and phone calls from 1-833-242-1931.

Ups text scam – I clicked on the link; what can I do?

If you clicked on this malicious link and entered any information on the fraudulent site, here are some important steps to take immediately:

1. Change your passwords and login credentials that you may have exposed, such as email, banking, and online shopping accounts.

2. Be on high alert for any unauthorized charges to payment methods you entered on the fake site.

3. Contact your bank and payment card providers about any suspicious activity to dispute fraudulent charges.

4. Run an antivirus scan on your device to check for any malware that may have been installed if you entered login information on the fake site.

5. Report the scam text to UPS by forwarding it to phishing@ups.com.

6. File reports about the scam with the proper authorities, like the FTC, at https://www.ftc.gov/complaint.

7. Delete and block it so you don't accidentally interact with it later.

How to Protect Yourself From UPS Text Message Scams

To ensure you don't fall victim to any fraudulent delivery notice texts, follow these tips:

Track incoming deliveries on the official UPS website

When you send a package or place an order, you'll receive a tracking number. Use this number to verify the legitimacy of any delivery notifications you receive. Track your packages directly on the UPS.com website.

Enable two-factor authentication (2FA) on your UPS account

Enabling 2FA adds an extra layer of security to your UPS account. Even if scammers obtain your password, they won't be able to log in without access to the verification code sent to your phone or authenticator app.

Contact UPS directly with any questions or concerns

Before clicking on any links or responding to suspicious texts, contact UPS directly. You can call their 24/7 customer support line at 1-800-742-5877 or visit their online contact center.

Regularly check your credit report and bank statements

Scammers often aim to gain access to financial accounts. Monitor your credit report and bank statements for any suspicious activity or unauthorized charges, which could indicate identity theft. Consider using Bitdefender Digital Identity Protection for continuous monitoring of your digital footprint and instant alerts in case of data breaches and leaks.

Check any text messages you receive from UPS using Scamio. If you ever receive any messages from UPS or other delivery services that you are unsure about, use Scamio, our AI-powered scam detection tool, to determine if they are scams. Simply send any suspicious texts, messages, links, QR codes, or images to Scamio, and it will analyze them and inform you if anyone is trying to defraud you.

Scamio is free and available on Facebook Messenger, WhatsApp, and your web browser. You can also help others stay safe by sharing Scamio with them in France, Germany, Spain, Italy, Romania, Australia and the UK.

Report UPS scams to UPS and government agencies

If you receive a UPS text scam or fall victim to one, report it to UPS by sending a screenshot to fraud@ups.com. You should also file reports with the Federal Trade Commission (FTC) and Better Business Bureau (BBB).

Frequently asked questions

Is there a UPS scam going around?

Yes. UPS itself warns about fraudulent text messages, calls, and other communications that misuse the UPS name to steal personal information, and the FTC says fake shipping texts remain a common scam year-round, not just during the holidays.

What is UPS in text messages?

In legitimate texts, UPS usually means a shipment or delivery notification tied to the UPS Notifications SMS program, such as tracking updates, delays, or delivery status. UPS says users can interact with that system using keywords like TRACK, HELP, and STOP.

What do UPS text messages look like?

Real UPS texts are typically straightforward shipment notifications about tracking, delay, exception, or delivery status. Fake ones often look more dramatic: they claim you missed a delivery, need to reschedule, must confirm an address, or have to click a link right away. UPS publishes examples of fraudulent SMS messages, and the FTC says scam delivery texts commonly push people to click links to “fix” a delivery problem.

How to identify a fake text message?

The biggest signs are urgency, unexpected links, requests for payment or personal information, and pressure to act before you verify anything. The FTC advises not to click links in unexpected texts and instead check delivery details directly through the retailer or carrier’s official site or app.