Package delivery
A parcel on hold until a small fee is paid; the fee page collects your card.
A 2019 email wave: "your package is on the way", a status of "handling – distribution center", and $5.00 in shipping costs to pay before delivery. The payment page collects card details; no package exists.
impersonating a delivery notification (no real brand) · first seen 2019-12 · updated 2026-09-02An email or text in a carrier's colours: a shipment is on hold until a customs or handling fee is paid, or a "delivery notice" with an attachment. The fee page collects card details; attachments carry malware.
impersonating FedEx (and other carriers) · first seen not dated · updated 2026-09-02A text message saying a parcel could not be delivered because of an incomplete address, with a link to "confirm" details or pay a small redelivery fee. The link opens a copy of the USPS tracking page that collects address and card details. USPS does not send unrequested tracking texts with links.
impersonating USPS · first seen not dated · updated 2026-09-02