The one rule Couriers and toll companies don't text you a link to pay a fee. Don't tap it. Check in the company's own app instead.
What it looks like
+1 (202) 555-0147
Text Message · Today 9:38
USPS: Your parcel is on hold because of an incomplete address. Pay the $0.30 redelivery fee within 12 hours or it will be returned: usps-redelivery[.]top/track
A number you don't know, not the company's name.
A tiny fee and a deadline, so you pay without thinking.
A link that looks almost right. The real site is usps.com.
Written from real scam texts. The link is broken on purpose, so it can't be opened.
The same text comes with other names: Salik in Dubai, toll roads in the US, Royal Mail and Evri in the UK. The link opens a copy of the real website. It takes the small fee, then your full card details.
Real or fake? Look at the address
Real websites end in the company's own name.
Already tapped the link?
-
You typed nothing
Close the page. You're fine.
-
You typed your name or address
Expect more scam texts. Don't answer them.
-
You typed your card, or a code from your bank
Call your bank now on the number on your card, and block the card.
Report it
- US: forward the text to 7726 (SPAM), then report it at reportfraud.ftc.gov. Fake USPS texts can also go to spam@uspis.gov.
- UK: forward the text to 7726 (free), then report it at reportfraud.police.uk.
- UAE: report it in the Dubai Police app, at ecrime.ae, or on 901.
Spotted this week
A fake USPS page
A copy of the USPS tracking page that asks for a small "redelivery" fee, then your card details.A fake parcel tracking page
A "track your package" page that asks you to pay before your parcel can be delivered.From public lists of known fake sites. The addresses are broken on purpose, so they can't be opened.
VeloGuardian Fortress and Citadel block websites that appear on public lists of known scams, before they load. Get the app