'Tis the season for holiday scams, and we've noticed one particular scam on the rise in 2024 that's now seen everywhere: Package and delivery scams. These tricks are especially hard to notice if you're waiting on multiple shipments or are juggling several different gifts, which is why they're so common right now.
While these scams can vary, they all target the "last mile" of package delivery where consumers are waiting to get their hands on shipments. Here's what to watch for so you don't get duped.
1. Getting a package you didn't order, aka 'brushing'
Getting packages you didn't order is often a sign of a scam in the works.
Brushing occurs when a fraudulent third party finds your address and sometimes even stolen credit card information online, and they use it to create a fake account for you at online superstores like Amazon.
Frauds then use that fake account to buy products and ship them out to real addresses. You get a package that you didn't order -- and the frauds get the ability to make glowing, false product reviews to bump up their numbers or initiate chargeback schemes. It's hard to deal with this scam because you may not know if a product is a secret gift or not, and it's often too much work to figure out what's going on.
When we asked Justinn Delaney, senior manager of property claims at Allstate what to do in case of brushing, he recommended using the sender information to find the fake account set up for your address and delete it, as well as watching for unexpected charges on your card. We also advise looking at our guide on how to erase your home address from online searches to keep this from happening. Take a minute to report it to the FTC too.
2. Getting a fake package delivery text, aka 'smishing'
Got an unexpected package text? It's probably not legit.
Smishing (and lots of related email phishing) attempts to mimic a package delivery text, often with complete details like a tracking number link or website like that looks like it's from a big carrier such as UPS or FedEx. Some scams go so far as to create fake carrier websites and tracking information to fool people. And phishing emails may include realistic logos or other info.
These messages tell users a package was rerouted or that a special package needs an online confirmation to be dropped off. Sometimes they warn you need to pay an extra fee or tax for the delivery to go through. Since many people are busy ordering and receiving packages around the holidays, they may not think twice about clicking these links.
Be wary of any texts about packages you didn't know about.
At best, smishing downloads some malware onto your device. At worst, it can fool people into giving out their bank account or credit card information for easy theft. Always use your original carrier information to check package status rather than a new email. Our tips on recognizing phishing messages for bank scams also work well here.
3. 'Missed package' notifications or stickers
Scammers are leaving physical missed delivery stickers that can look like the real thing.
Another common package scam message is a warning of an all-too-common fear -- someone tried to deliver a package, but they need your signature and no one was home. We're also seeing some scammers post physical drop-off stickers on doors the same way real deliverers do, which can look very convincing and even come with fake QR codes that are all too easy to scan.
But these fake messages lead to phishing links, malware and mock sites that want your financial details. Again, even if you have physical evidence, check your original tracking number email to see where your package really is, and never trust a message that says you need to pay extra money or confirm your delivery information.
4. Mail tracking and hacking
Delivery boxes come in many designs to match a variety of homes and porches.
We've also seen a rise in thieves who use insider information to steal very real packages during the delivery process. Sometimes these thieves get access to PO Boxes and similar shipment areas so they can steal expensive-looking packages directly.
Other times, they're using what appears to be stolen tracking numbers, so they know when high-value items like iPhones are dropped and can nab them within seconds.
Our overall tips on how to stop porch pirates work well for these kinds of thieves, too. That includes in-garage deliveries, using delivery lock boxes and setting up a video doorbell.
Read more: Why Burglars Have Started Spying Through Hidden Security Cameras
To learn even more about scams and package protection, read up on our package theft survey, learn about TikTok holiday scams, and take a look at the most affordable video doorbells.