How do bots impersonate delivery companies in package tracking scams?
A message timed to a moment everyone recognizes
The text is short and boring on purpose: a parcel could not be delivered, action is required, here is a link. It works because it asks for no imagination. Most households have a package in transit at any given moment, so the lie lands on prepared ground without the sender knowing anything about the victim.
Volume replaces targeting. Bot driven campaigns send millions of these messages through rotating numbers and domains, knowing a small percentage of recipients clicked a real tracking link that same week. The scam does not need good information about you. It needs good timing across a huge population.
The fake tracking page does the real work
The landing page copies carrier colors, fonts, and layout, shows a plausible tracking timeline with one problem at the end, and asks the visitor to confirm an address and pay a small redelivery or customs fee. The fee is the trap: it feels too small to be a scam, and it collects full card details.
Well built pages adapt. They detect the visitor's country and switch carrier branding and language to match, and they reject test card numbers so the harvest stays clean. Some even show a fake confirmation at the end, buying the operator days before the victim suspects anything.
What happens to the harvested details
Cards are tested with tiny charges, then used for quick purchases that convert to cash or resold goods, or bundled and sold to other criminals. The small redelivery fee itself is rarely the main profit. It is the qualification step that proves the card is live and the owner is responsive.
Victims often lose twice. The same page frequently collects email credentials or asks the visitor to sign in with a shopping account, handing over passwords that unlock far more than a parcel. One careless minute on a fake tracking page can start weeks of account recovery.
Why carriers and retailers struggle to stop it
The infrastructure is disposable. Domains live for hours, numbers rotate constantly, and the messages ride legitimate messaging channels mixed with real delivery traffic. Blocking one wave barely dents the next, and aggressive filtering risks swallowing the genuine delivery notices customers depend on.
There is also a data gap problem. Shoppers cannot easily verify a message because real carriers send similar texts with shortened links. When the genuine and the fake look identical by design, telling users to just be careful is not a defense. The verification path itself has to change.
Habits that break the scam every time
Never follow the link in the message. Open the carrier or retailer app yourself, or type the tracking number from your order email into the carrier site you navigated to directly. Real tracking information lives in your order history, not in an unsolicited text.
Treat any delivery fee request as a stop sign. Carriers almost never collect redelivery fees through a texted link, and customs charges come with formal notices, not a countdown. If a message creates urgency about a parcel, that urgency is the product being sold.
Frequently asked questions
How do scammers know I have a package coming?
Usually they do not. Campaigns send millions of messages, and because so many people are expecting parcels at any time, a share of recipients will assume the message is about their real delivery.
Why is the redelivery fee so small?
A small fee feels harmless and converts well. The real goal is your full card details and personal information, which are worth far more than the fee itself.
What should I do if I already paid on a fake tracking page?
Contact your card issuer immediately to freeze or replace the card, change passwords for any account you entered on the page, and watch statements for small test charges that signal the details are being used.
Do real carriers ever text tracking links?
Some do, which is why the scam works. The safe habit is to ignore the link and check tracking through the app or site you open yourself, using the number from your order confirmation.