Scam Spotlight Series: Smishing Scams & Package Tracking Text Fraud
June 26, 2025
Smishing (SMS phishing) is a scam delivered via text messages designed to trick you into clicking malicious links or sharing sensitive information. In these scams, you might receive alerts claiming there’s an issue with a delivery, an account, or even law enforcement—purportedly containing links that lead to fake websites or malware downloads. The goal is to steal your personal data—like debit/credit card numbers—or install harmful software. Package tracking text scams are among the most common and deceptive types of smishing.
Why Smishing Is a Serious Threat
- In 2024, consumers lost $470 million to text-based scams, many involving fake delivery alerts and job offers. (Federal Trade Commission)
- FCC data shows complaints about scam texts have surged, with unauthorized messages rising from ~5,700 in 2019 to over 15,300 by mid-2022. (Federal Communications Commission)
- The U.S. Postal Inspection Service warns that smishing texts pose as USPS notifications—complete with tracking issues and redelivery fees—to harvest personal and financial data. (United States Postal Inspection Service)
Real-Life Scenario: How Alex Had Debit Card Information Stolen via SMS
Alex received a text in the middle of the workday from an unknown number that read: USPS Alert: Delivery failed. Please update your payment info: [link with random letters and numbers]
Having placed an order recently through Amazon and worried about missing the package, Alex clicked the link and was taken to a site mimicking USPS. The site had Alex's house listed as the delivery address and said the package was undeliverable. It then asked for address verification and debit card information to “cover a redelivery fee.” Believing it be legitimate, Alex entered a debit card number, expiration date, and CVV.
Within hours, suspicious charges started appearing. Alex immediately contacted the bank, who froze the card and helped dispute the fraudulent transactions. The bank also gave Alex information on how to report the scam message as spam. Thanks to quick action, most of the damage was halted—but the stolen info required a new card and monitoring.
Note: Alex's story is a fictional example created to illustrate how tech support scams operate and to protect the privacy of real individuals.
How to Protect Yourself from Smishing
Never click links in unsolicited texts
If you receive a tracking text but didn’t request it, don’t click. Instead, open your carrier’s or USPS’s official app or website and check your delivery status directly.
Verify the sender
Genuine USPS, FedEx, or Amazon messages don’t include links. They’ll invite you to track deliveries using legitimate apps or emails .
Don’t share payment info via SMS
Never enter financial details through links in texts. Scammers pretend it’s normal to pay redelivery fees via SMS to gain trust.
Use spam filters and blocking tools
Enable your phone’s security features to block unknown numbers and spam texts. Many carriers offer automated filtering to stop scam texts before they reach you.
Report smishing attempts
Smishing is fast, deceptive, and widespread. If you’re ever uncertain, stay cautious: don’t click links, verify using official channels, and report suspicious texts. Your vigilance helps make our community safer.
For more on how to detect and defend against smishing, visit the Federal Trade Commission's Text Scam Guide and the United States Postal Inspection Service Smishing Alert.
Stay alert and report suspicious texts—your awareness is your best defense.
About the Scam Spotlight Series:
Each month, we shine a light on the latest scams that fraudsters use to trick people into giving up their money or personal information. In 2024, consumers reported losing over $12 billion to fraud, with 20-29 and 70-79 year olds being the most targeted age groups, according to the Federal Trade Commission. By sharing real-life examples, we aim to uncover the tactics scammers use, helping you recognize and avoid their schemes. Along the way, we’ll also provide practical tips to safeguard yourself and your loved ones. At Rivers Edge Bank, your safety and security are our top priorities—because protecting your hard-earned money starts with staying informed. To learn more about cybersecurity best practices, visit our Cyber Security page.