Why Did I Get A Package Delivery Text I Didn't Order?
Learn how to spot a fake delivery text, handle mystery parcels, and report smishing in minutes.
You got that text because mass-sent fake delivery alerts go to random phone numbers. That unexpected link is almost always smishing, and smishing means phishing by text that tries to steal personal or payment details. Do not click, reply, or scan anything in the message.
CISA describes how that link can open a browser, email, or dialer to capture your information, so pause and check another way.
Verification note: Program terms and availability can change. This page was checked against linked sources on November 02, 2026.
How can you tell a delivery text is fake?
If you did not ask for tracking on that parcel, treat a link-bearing delivery text as fake. The U.S. Postal Inspection Service says any text with a link claiming a USPS delivery needs your response is smishing when you never requested tracking, as explained in Postal Inspection Service advice on package tracking texts.
USPS only sends texts after you request tracking with a tracking number. The Postal Inspection Service also notes legitimate USPS texts never contain a link, according to Postal Inspection Service guidance on identity fraud. Look for pressure to act fast, odd sender numbers, and misspelled carrier names.
Fake texts often impersonate USPS, FedEx, UPS, DHL, or Amazon and push you to update an address or pay a small fee.
Why are these texts so common?
Scammers can send thousands of texts for little cost. They only need a few people to click and enter card or account details. FTC data found fake package-delivery texts impersonating major carriers were the most-reported U.S.
text problem of 2024. The FTC reported $470 million lost to all text fraud that year, five times the 2020 total. That scale explains why you may get one without ordering anything.
Your number was likely in a bulk list, not selected because of a real parcel.
What if a real package arrives that you did not order?
A surprise parcel is different from a surprise text. It can be brushing, where a seller ships a cheap item to your address to post a fake verified-purchase review in your name. Common brushing items include wipes, toothpaste, or small household goods, the FTC notes in FTC consumer advice on unexpected packages.
Seeds also show up in some reports. Many brushing parcels now include a card with a QR code. Do not scan it to find the sender or start a return, because scanning can lead to phishing sites or malware that steal passwords or card numbers.
What should you do next?
Verify only through a channel you open yourself. Type the carrier or retailer address yourself or use its app, then enter any tracking number manually. Take these quick steps for a suspicious text: Federal guidance treats unordered merchandise as a gift.
The FTC explains companies cannot demand payment for it, and you need not pay for or return it.
- Do not click the link or call numbers in the text.
- Do not share codes, passwords, or payment details.
- Forward the text to 7726, then delete it.
- Report it to ReportFraud.ftc.gov and ic3.gov, as described in FCC guidance on avoiding package delivery scams.
Frequently Asked Questions
Should I click to see who sent a mystery package?
No. Type the carrier or retailer address yourself or use its app instead of using links or QR codes from the message or parcel insert.
Do I have to pay for or return something I did not order?
No. Federal guidance treats unordered merchandise as a gift, so you do not have to pay or send it back.
Where should I report a fake delivery text?
Forward the text to 7726, forward USPS-related email to [email protected], and file reports with ReportFraud.ftc.gov and ic3.gov.