Skip to content

Companies

UPS scams: how the fake messages work

UPS package delivery scams are fraudulent text messages and emails claiming that your shipment is delayed, held at customs, or missing an address. Scammers use fake tracking links and create urgency to trick victims into paying small delivery fees or entering personal information on spoofed websites. Genuine UPS notifications originate strictly from official short code 69877 or domains ending in ups.com, and never demand unsolicited payments for package release.

Last reviewed: August 9, 2026  ·  Drafted with AI assistance. Every figure on this page was checked against the source cited for it. Not yet reviewed by a human editor.

ScamPreventionGuide is an independent consumer-protection resource. We are not affiliated with, endorsed by, or sponsored by UPS. Company names and trademarks are the property of their respective owners and are used here only to identify the companies that scammers impersonate.

01

Is the UPS message real?

Official text messages in the United States originate exclusively from short code MYUPS (69877) or require prior consumer consent through UPS My Choice. Official emails originate strictly from domains @ups.com, @billing.ups.com, @go.ups.com, or @links4.upsemail.com. UPS never requests unsolicited payments, bank account numbers, passwords, or personal information via text, email, phone, or fax, and does not demand fees or gift cards in exchange for package delivery.

According to the Federal Trade Commission (FTC) Consumer Protection Data Spotlight published in April 2025 (https://www.ftc.gov/news-events/data-visualizations/data-spotlight/2025/04/top-text-scams-2024), package delivery text message scams—frequently impersonating major couriers including UPS, FedEx, and the U.S. Postal Service—remain among the top-reported text scams accounting for a significant share of text frauds in 2024 (FTC, 2025). Source: Top Text Scams of 2024.

02

Which versions are in circulation?

The versions in circulation, and what each one is after:

VersionHow it reaches youWhat it wants
Package Delivery Hold & Redirection FeeSMSCredit card details, personal identifying information, and small processing fee
Customs Duty / Tariff Clearance ScamEmail / SMSCredit card numbers, billing addresses, and banking credentials
Warehouse Storage Fee DemandSMSFinancial account details and recurring fraudulent subscription charges
Fake Work-From-Home Check ScamPost / CourierVictim deposits counterfeit check, wires real funds, and suffers bank account deficit when check bounces
Compromised Account / Password Reset PhishingEmailAccount username, password, and enterprise account billing control
03

How can you tell a real message from a fake one?

The differences you can check yourself:

  • The genuine UPS text message in the United States originates exclusively from short code 69877 (MYUPS) or requires prior opt-in via UPS My Choice; any other phone number or standard 10-digit number is a scam.
  • The genuine UPS tracking link always directs to the exact domain ups.com (such as ups.com/track), whereas scam links use altered variations like ups-tracking.com or ups.pay-invoices.com.
  • Genuine UPS epackage notifications always use URLs starting strictly with https://ftp2.ups.com; any other subdomain prefix is fraudulent.
  • The genuine UPS shipping notification never demands immediate payment of minor redelivery fees, customs duties, or storage charges via third-party web forms or gift cards.
  • The genuine UPS tracking number contains precisely 18 characters starting with 1Z (e.g., 1Z9999999999999999); generic or mismatched tracking formats indicate a phishing attempt.
04

What should you do in the first hour?

It depends on how far it got. Find your situation:

  • Do not click any further links, block the sending phone number or email address immediately, and report the message via UPS Fraud Reporting or forward phishing emails to fraud@ups.com.
  • If you gave information (usernames, passwords, personal data): Immediately log into your genuine account at https://www.ups.com, change your password, enable multi-factor authentication, and check your profile for unauthorized shipping addresses or user permissions.
  • Immediately contact your bank or credit card issuer to freeze your cards, dispute fraudulent charges, and report the financial fraud to the FTC at ReportFraud.ftc.gov.
  • Disconnect your device from the internet immediately, run a reputable antivirus scan to remove potential malware or keyloggers, and change sensitive financial passwords from a clean, uncompromised device.
05

Where do you report it?

UPS Report Fraud Page and email fraud@ups.com · UPS · 2026-08-07 · 2026-08-07 · Used for reporting fraudulent activity and unauthorized profile updates.

Whatever the brand, two official channels take the report. File with the US Federal Trade Commission at reportfraud.ftc.gov, and — if money was lost or a computer was accessed — with the FBI's Internet Crime Complaint Center at ic3.gov. Reporting rarely recovers money on its own; it is what makes the next person's warning possible.

06

Sources