UPS text scam – I clicked on the link; what can I do?

Text scams, which often disguise themselves as legitimate messages from trusted companies, financial institutions, or government agencies, are designed to trick you into clicking malicious links or divulging sensitive information. The consequences can range from financial losses to identity theft and even malware infections.

Bitdefender research conducted between September and December 2023 has shed light on the alarming prevalence and impact of SMS text scams worldwide.

According to the findings, most malicious messages were about package deliveries, followed by banking, government, social media, and other platform accounts, and fake prizes.

The research revealed that:

Attackers have taken in around $40 million in just three months.
Around 15% of SMS recipients will result in a person clicking a URL.

In this article, we focus on UPS scam texts. However, the red flags and tips for staying safe apply to any delivery message received from major shipping carriers such as UPS, FedEx, DHL, and national post offices.

What is a UPS text message scam, and how it works

UPS text scams involve scammers sending fake text messages pretending to be from UPS regarding a delivery. These messages typically contain phony tracking numbers, false claims about a "missed" or "rescheduled" delivery, and a link to arrange a new delivery date.

The 4 most common UPS text scams

1. Fake missed delivery notification

One of the most widespread UPS text scams claims that you missed a delivery and need to reschedule. Even if you didn't order anything, scammers hope you'll be curious enough to click the link.

These texts may include bogus tracking numbers or mention "redelivery costs," but the goal is to get you to click. If the text doesn't have your name, address, or a legitimate tracking number (that you can verify on the official UPS website), it's likely a scam. Also, be wary of links that appear to be UPS-related but don't lead to the real UPS.com domain.

2. "Delivery fee" notifications

In this scam, fraudsters create a sense of urgency by claiming you owe a "delivery fee" to receive your package - a customs fee or other payment before delivery.

If you click the link, you'll be taken to a fake website mimicking UPS, where any information you provide (credit card, address, SSN, etc.) will be stolen.

Legitimate UPS won't send payment links via text or ask you to submit sensitive data this way. Also, check that any tracking numbers provided actually work on the real UPS.com website.

3. "Incomplete address for delivery" notification

Scammers ask that you "verify" or fill in your details before delivering. They'll request your name, phone number, address, and sometimes even your Social Security number (SSN) and credit card numbers. Any information you provide goes straight to the scammers.

These fake sites may use UPS branding, colors, and URLs that appear associated with UPS to seem legitimate. However, the domain won't be UPS.com, and they'll often ask for excessive information that UPS wouldn't require just to "find" a delivery. Never enter sensitive data on suspicious sites.

4. Malware infection attempts

In some cases, hackers hide malware in the links sent via UPS text scams. If you click, your device could become infected, giving scammers access to your data, camera, microphone, and more. They may even hold your device for ransom.

Be very cautious about clicking any strange links, especially if they pressure you to do so. Verify the legitimacy of shipping notifications directly with UPS before clicking links.

How to identify a UPS text scam

Here are some red flags you can look out for to identify a UPS text scam:

• You're not expecting a package delivery. Scammers send these messages randomly, hoping to catch recipients who aren't actively awaiting a shipment. If you haven't ordered anything, be skeptical.

• Unsolicited messages with links. UPS typically only sends texts if you've requested delivery updates for an active shipment. Be wary of unexpected links.

• A sense of urgency or scare tactics. Scammers often try to pressure you into quick action by claiming you'll miss the delivery or owe money if you don't act immediately.

• Requests for payment to receive your package. While you may need to pay legitimate fees sometimes, UPS won't ask for money via unsolicited texts or non-official channels like gift cards or crypto.

• Fake tracking numbers provided. Always verify any tracking numbers on the official UPS.com website before taking action.

• Links leading anywhere other than UPS.com. Scammers use deceptive URLs mimicking the real UPS site. But if it doesn't go to the official UPS.com domain, it's likely malicious.

• Strange phone numbers calling or sending texts. In the U.S., legitimate UPS texts should only come from 94601, 69877, 48515, or 52892, and phone calls from 1-833-242-1931.

Ups text scam – I clicked on the link; what can I do?

If you clicked on this malicious link and entered any information on the fraudulent site, here are some important steps to take immediately:

1. Change your passwords and login credentials that you may have exposed, such as email, banking, and online shopping accounts.

2. Be on high alert for any unauthorized charges to payment methods you entered on the fake site.

3. Contact your bank and payment card providers about any suspicious activity to dispute fraudulent charges.

4. Run an antivirus scan on your device to check for any malware that may have been installed if you entered login information on the fake site.

5. Report the scam text to UPS by forwarding it to [email protected].

6. File reports about the scam with the proper authorities, like the FTC, at https://www.ftc.gov/complaint.

7. Delete and block it so you don't accidentally interact with it later.

How to Protect Yourself From UPS Text Message Scams

To ensure you don't fall victim to any fraudulent delivery notice texts, follow these tips:

Track incoming deliveries on the official UPS website

When you send a package or place an order, you'll receive a tracking number. Use this number to verify the legitimacy of any delivery notifications you receive. Track your packages directly on the UPS.com website.

Enable two-factor authentication (2FA) on your UPS account

Enabling 2FA adds an extra layer of security to your UPS account. Even if scammers obtain your password, they won't be able to log in without access to the verification code sent to your phone or authenticator app.

Contact UPS directly with any questions or concerns

Before clicking on any links or responding to suspicious texts, contact UPS directly. You can call their 24/7 customer support line at 1-800-742-5877 or visit their online contact center.

Regularly check your credit report and bank statements

Scammers often aim to gain access to financial accounts. Monitor your credit report and bank statements for any suspicious activity or unauthorized charges, which could indicate identity theft. Consider using Bitdefender Digital Identity Protection for continuous monitoring of your digital footprint and instant alerts in case of data breaches and leaks.

Check any text messages you receive from UPS using Scamio. If you ever receive any messages from UPS or other delivery services that you are unsure about, use Scamio, our AI-powered scam detection tool, to determine if they are scams. Simply send any suspicious texts, messages, links, QR codes, or images to Scamio, and it will analyze them and inform you if anyone is trying to defraud you.

Scamio is free and available on Facebook Messenger, WhatsApp, and your web browser. You can also help others stay safe by sharing Scamio with them in France, Germany, Spain, Italy, Romania, Australia and the UK.

Report UPS scams to UPS and government agencies

If you receive a UPS text scam or fall victim to one, report it to UPS by sending a screenshot to [email protected]. You should also file reports with the Federal Trade Commission (FTC) and Better Business Bureau (BBB).

Q&A:

What should I do if I accidentally clicked on a link from a UPS text scam?

If you click on the malicious link and enter any information on the fraudulent site, you should immediately take the following steps: 1) Change your passwords and login credentials that you may have exposed. 2) Be alert for any unauthorized charges and contact your bank/payment providers about suspicious activity. 3) Run an antivirus scan on your device for malware. 4) Report the scam to UPS ([email protected]) and file a report with the FTC (ftc.gov/complaint). 5) Delete and block the scam message.

How can I identify a UPS text scam?

Some red flags that indicate a UPS text message may be a scam include unsolicited messages with links when you're not expecting a delivery, a sense of urgency or scare tactics, requests for payment to receive your package, fake tracking numbers, links leading anywhere other than UPS.com, and strange phone numbers sending the texts.

What are some tips to protect myself from UPS text message scams?

To avoid falling victim, you should track incoming deliveries only on the official UPS website, enable two-factor authentication on your UPS account, contact UPS directly with any questions instead of responding to suspicious texts, regularly monitor your financial accounts for fraud, use a tool like Scamio to check if messages are scams, and report any UPS scams to the company and authorities like the FTC.