Skip to content

Companies

FedEx scams: how the fake messages work

A FedEx scam is a widespread phishing scheme where fraudsters impersonate the global courier via text message or email to claim a package delivery failure, incorrect address, or unpaid customs tariff. The messages contain malicious links directing victims to fake websites designed to harvest personal information, install malware, or steal credit card details under the guise of paying small redelivery fees.

Last reviewed: August 9, 2026  ·  Drafted with AI assistance. Every figure on this page was checked against the source cited for it. Not yet reviewed by a human editor.

ScamPreventionGuide is an independent consumer-protection resource. We are not affiliated with, endorsed by, or sponsored by FedEx. Company names and trademarks are the property of their respective owners and are used here only to identify the companies that scammers impersonate.

01

Is the FedEx message real?

Official reporting channel: Customers and victims should report fraudulent emails and phishing attempts to reportphishing@fedex.com, forward suspicious text messages to 7726 (SPAM) or report them to the FTC, and contact FedEx Fraud Department directly at 1.800.584.2681 for unauthorized account activity or charges.

How the brand actually contacts customers: FedEx contacts customers regarding legitimate shipments via official tracking notifications, electronic or physical invoices for shipping or customs charges, and requests for customs documentation. FedEx never requests payment, passwords, PINs, or full credit card numbers via unsolicited text messages or emails, nor does it demand payment through cryptocurrency, wire transfers, or gift cards.

FTC / IC3 Category Figures: According to Federal Trade Commission (FTC) data reported in 2025 for overall text-message and delivery scams, consumer losses to text scams hit $470 million in recent reporting periods, with package-delivery problems remaining the most common text scam category. Source: Is that text message about your FedEx package really a scam?.

02

Which versions are in circulation?

The versions in circulation, and what each one is after:

VersionHow it reaches youWhat it wants
Failed Delivery & Address UpdateSMS / SmishingSteal personal identity details, credentials, and credit card information via fake phishing landing pages
Customs Duties & Tariff PaymentSMS / EmailHarvest credit card numbers and financial account credentials under the guise of paying small customs tariffs
Malware Delivery via Invoice AttachmentEmailInstall malicious payload or ransomware onto the victim's computer or mobile device
Fake Prize & Survey ScamSMS / WebCapture credit card numbers and enroll victims in recurring hidden subscription billing traps
Phishing Login Credential HarvestEmailSteal enterprise or consumer fedex.com login usernames, passwords, and 2SV recovery data
Reshipping & Mule Job ScamsSocial Media / WebRecruits unwitting employment victims to receive and forward goods bought with stolen credit cards (money/goods laundering)
03

How can you tell a real message from a fake one?

The differences you can check yourself:

  • Mismatching Sender Domain: The message originates from a free consumer email provider (e.g., @gmail.com, @yahoo.com) or a spoofed domain (e.g., fedx.com, fed-ex-tracking.co) rather than official @fedex.com addresses.
  • Urgent Financial Demands for Release: The message insists on immediate payment via credit card, gift cards, or cryptocurrency to release a held package or settle minor customs tariffs.
  • Non-Working Tracking Numbers: When entering the tracking number provided in the text or email directly into the official FedEx homepage (fedex.com), the system shows no record or invalid status.
  • Unrelated Landing Page Destinations: Clicking the delivery link redirects to an unrelated survey, third-party sweepstakes site, or a credential login portal (Google, Yahoo, Apple) instead of official tracking.
  • Grammar and Formatting Imperfections: The communication contains irregular capitalization, awkward phrasing, or spelling errors that do not appear in professional corporate dispatches.
04

What should you do in the first hour?

It depends on how far it got. Find your situation:

  • If you contacted them or clicked a link but gave nothing: Immediately close the browser tab, disconnect your device from the internet to halt potential drive-by malware downloads, and clear your browser cache.
  • If you gave personal information or credentials: Immediately navigate independently to fedex.com, log into your account to change your password, and enable Two-Step Verification (2SV). If you entered email or banking credentials elsewhere, change those passwords immediately.
  • If you paid or transferred money / gave card details: Contact your credit card issuer or bank immediately to freeze the affected card, dispute fraudulent charges, and report financial compromise. Report the fraud to FedEx Fraud Department at 1.800.584.2681.
  • If you gave remote access to your computer: Disconnect from the internet immediately, run a reputable offline malware scan using anti-malware software, and check for unauthorized remote-desktop tools or installed applications.
05

Where do you report it?

Official security/fraud page: FedEx Trust Center & Fraud Reporting · FedEx Corporation · https://www.fedex.com/en-us/report-fraud.html · Accessed: 2026-08-07 · Used for official customer guidance on recognizing, preventing, and reporting courier fraud.

Whatever the brand, two official channels take the report. File with the US Federal Trade Commission at reportfraud.ftc.gov, and — if money was lost or a computer was accessed — with the FBI's Internet Crime Complaint Center at ic3.gov. Reporting rarely recovers money on its own; it is what makes the next person's warning possible.

06

Sources