Why Do Delivery Text Scams Spike Before Christmas?

By · · Category: Safety & Security
Why Do Delivery Text Scams Spike Before Christmas?

The fake "failed delivery" text is the year's most reported text scam — here is the seasonal math behind it and the one tell that settles it.

Delivery text scams spike before Christmas because the lie becomes plausible for almost everyone at once. When a country has tens of millions of packages in transit, a text claiming a delivery problem no longer needs to be targeted — it only needs to arrive during the weeks when nearly everybody is waiting for something. Smishing — phishing delivered by SMS — works on expectation rather than information.

The sender does not know what you ordered, or whether you ordered anything. Seasonal volume does that work for them, which is why the fake "failed delivery" notice is the most reliable scam text of the year.

Verification note: Program terms and availability can change. This page was checked against linked sources on November 13, 2026.

The seasonal math behind the surge

The U.S. Postal Service said it expected to handle roughly 16 billion mail pieces and packages between Nov. 15 and Jan.

9 of the 2025–26 peak season, according to its holiday readiness announcement. That is the number that makes the scam work. A "we could not deliver your parcel" text sent in July reaches mostly people with nothing in transit.

The same text sent in early December reaches a population that is largely expecting a delivery, often several, frequently from senders they cannot immediately name. The scammer's cost per message does not change; the hit rate does. Expectation also removes the usual pause.

A gift ordered for a fixed date carries a deadline, and a deadline makes people act before they think — which is the entire operating principle of the message.

What the reporting data actually shows

Fake package-delivery alerts were the most commonly reported category of text-message scam in 2024, according to the Federal Trade Commission's data spotlight on top text scams. The typical message impersonates the Postal Service and claims a delivery problem that must be fixed through a link. The financial trend is worse than the report count suggests.

The FTC found consumers reported losing $470 million to scams that started with a text in 2024 — five times the 2020 figure — even though the number of text-scam reports fell over the same period. The share of text-scam reports involving actual money lost rose to about 11%. Fewer messages, more money.

That points to better-written scams rather than fewer of them, and the delivery pretext is the one that has been refined the most.

How much of the "Christmas spike" is measured

The seasonal pattern has been measured directly, though mostly outside the United States. UK Finance, drawing on Proofpoint data, reported that 55.94% of all reported smishing texts in Q4 2021 impersonated parcel and delivery companies, up from 16.37% in Q4 2020 — published in its parcel delivery scam warning. The share of the scam market taken by delivery themes more than tripled in a single holiday quarter.

Proofpoint's own measurements show the raw volume moving the same way, with holiday-period mobile phishing roughly doubling year over year: smishing up 87% from Q4 2019 to Q1 2020, and 127% from Q4 2020 to Q1 2021. One honest limit: no U.S. federal agency publishes a month-by-month breakdown of delivery-text reports, and the FBI stopped segmenting holiday-season fraud data in 2024.

The annual American totals are official; the seasonal shape rests on carrier and vendor telemetry plus UK banking figures. The mechanism is well documented, but there is no U.S. government dataset you can point at to size the December peak precisely.

The script, and where the real loss happens

The standard version is a claimed redelivery failure followed by a request for a small fee or an address confirmation, according to UK Finance's Take Five guidance on delivery scam texts. The link opens a convincing imitation of a carrier's site. The small fee is the hook, not the goal.

A $1.99 or £1.50 charge is low enough that people pay it without research, and paying it hands over a card number, a billing address, a name and a phone number. Those details are the payload — resold, used for larger charges, or used to make a follow-up call sound legitimate. That follow-up is worth expecting.

Someone who has your address, your card's last four digits and knowledge of a recent delivery issue can open a phone call with facts that feel like proof of identity.

The one tell that settles it

The U.S. Postal Inspection Service states in its holiday scam advisory that USPS does not send customers unsolicited tracking texts, and that a legitimate tracking text a customer actually requested will not contain a link. That turns a judgment call into a rule.

You do not have to assess whether the wording looks right, whether the sender ID looks plausible, or whether the URL is a near-miss of the real domain. A link in a postal delivery text is the tell by itself. Useful checks when a delivery text arrives:

  • Did you request tracking updates from that carrier? If not, the message is unsolicited.
  • Does it contain a link? A postal tracking text should not.
  • Does it ask for a payment, however small, to release a parcel?
  • Does the tracking number in the message match anything in your own order confirmations?
  • Does it create urgency — a parcel returned today, a final notice?

What to do with the message

The Federal Communications Commission's robotext consumer alert sets out the practical response: forward the message to 7726 (SPAM), which alerts your mobile carrier, and report it to the Postal Inspection Service at [email protected] or to the FTC. To check a delivery genuinely in doubt, type the tracking number into the carrier's own site yourself. Do not tap the link, and do not copy the number out of a message you do not trust — a wrong number returns "not found," which tells you something, while a tapped link tells the sender your number is live.

Context worth keeping: the FTC's figures indicate only about 11% of text-scam reports involve money lost, meaning most people who report these messages recognised them. Smishing needs no prior relationship with the carrier being impersonated, so everyone with a phone number receives them; the losses concentrate among the minority who click during the weeks when clicking feels reasonable.

Frequently Asked Questions

Does a delivery text scam require the scammer to know I ordered something?

No. The messages are sent broadly to phone numbers with no prior relationship to the carrier being impersonated. Holiday shipping volume supplies the plausibility instead — the FTC notes smishing needs no existing relationship with the brand being faked.

I paid the small "redelivery fee." What was actually taken?

The payment itself is minor; the card number, name, billing address and phone number you entered are the real target, per UK Finance's Take Five guidance. Contact your card issuer, watch for follow-up calls that cite those details, and report the message to the FTC.

How can I tell a real USPS text from a fake one?

The Postal Inspection Service states USPS does not send unsolicited tracking texts, and that a tracking text you requested will not contain a link. Any link in a postal delivery text is itself the warning sign.

Is there official U.S. data confirming the December spike?

The FTC publishes annual totals confirming delivery alerts as the top text scam, but no U.S. agency publishes a month-by-month seasonal breakdown, and the FBI stopped segmenting holiday fraud data in 2024. The seasonal pattern comes from carrier and vendor telemetry and UK banking figures.

More from the blog