Package Scams

Some package crooks resort to even simpler means. These “porch pirates” watch for delivery vans that leave legitimately purchased merchandise at consumers’ doorsteps, ideally when the targets aren’t home, then swoop in and make off with the goods. In a November 2021 survey of 2,000 consumers by market-research firm C+R, 23 percent said they'd had a package stolen from a doorstep or porch, and nearly a third of that group said it had happened more than once.

Warning Signs

• You get an email or other communication about a delivery of something you don’t remember ordering.
• The message presses you to urgently make a payment or provide personal or financial information to facilitate a delivery.
• The message includes misspellings or poor grammar.
• A supposed delivery company email has a sender’s address or link with a slightly different version of a business name, such as fedx.com.

How to protect yourself from this scam

• Do be wary of unsolicited phone or electronic communications from a delivery service. Companies will usually alert you to a failed delivery by leaving a notice on your door.
• Do keep track of your online orders and their shipping status. Knowing what’s coming and when makes it easier to spot fake delivery messages.
• Do hover your cursor over links in a supposed delivery email to display the actual target URL.
• Do rely on safe ways to communicate with delivery companies. Call a confirmed customer-service number, or log on to a company’s official website and use the chat function.
• Do consider these steps to thwart porch pirates:
  • Ask neighbors to pick up your deliveries when you’re not home.
  • Have packages sent to your workplace or the home of a nearby friend or relative. 
  • Use a parcel-delivery locker. The U.S. Postal Service and Amazon offer locker delivery at select locations at no extra charge.

• Don’t respond to an unsolicited email claiming to be from a delivery service that asks you to provide, update or verify personal information.
  
• Don’t click on a link or open an attachment in an unsolicited email or text message that appears to be from a delivery company.
• Don’t give out personal or credit card information to a caller. Instead, find and call the company’s official customer-service number and ask if they were genuinely trying to contact you about a delivery.
• Don’t reveal your user ID or password for a delivery company’s website to a caller, or to anyone else.
• Don’t call the number on a delivery notice left on your door. If the notice names a company, call its official customer-service line to check on a supposed delivery.
• Don’t rely on official-looking logos or professional-sounding language as proof of authenticity. Scammers study and copy companies’ actual communications to make their ploys look and sound convincing.

More Resources

• Report suspected package scams to the Federal Trade Commission, online or toll-free at 877-382-4357. If the scam occurred online, report it as well to the FBI’s Internet Crime Complaint Center.
  
• If you receive a suspicious message that claims to be from UPS, forward it to fraud@ups.com for investigation, then delete the message.
• If the message appears to be from FedEx, or if you visit what you think might be a phony FedEx website, report it at abuse@fedex.com.
• Forward suspicious U.S. Postal Service emails to the U.S. Postal Inspection Service at spam@uspis.gov.
• If you have questions about a delivery notice from the U.S. Postal Service, visit its website or call 800-ASK-USPS (800-275-8777).