NEWNow you can listen to Fox News articles!
As we approach the final stretch December (and last-minute gift shopping), your doorstep is probably busier than ever. And if you're anything like me, you're also probably juggling shipping updates, tracking numbers, and delivery alerts from a half-dozen retailers.
Unfortunately, scammers know this too and they've probably been preparing for this all year. Like clockwork, I've already started seeing the usual wave of fake tracking messages hitting people's phones. They look legitimate, show up exactly when you expect them to arrive, and rely on one inescapable truth: During the holiday rush, most of us are too overwhelmed to notice when something is wrong.
However, there is no need to panic. You can still stay ahead of the scammers. I'll show you what to look out for and how to avoid being attacked in the first place.
Subscribe to my FREE CyberGuy Report
Get my best tech tips, breaking security alerts, and exclusive offers straight to your inbox. Plus, you'll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
FALSE REFUND FRAUD: WHY FRAUDERS LOVE HOLIDAY SHOPPERS
Holiday shoppers are facing a wave of fake delivery messages designed to steal personal information and account logins. (Photo by Sebastian Kahnert/Image Alliance via Getty Images)
What fake delivery text messages look like
Most of these fake shipping messages include a “tracking link” that looks close enough to the real thing that you can click on it without thinking about it. In some cases, as one Maryland woman discovered, you may even get fake deliveries with QR code it works in a similar way.
These links usually lead to a fake tracking page that looks almost identical to the real one. It will ask you to “confirm” your login or enter your delivery information. The moment you enter something, scammers grab it and use it to access your real accounts.
Even worse, the “tracking link” may contain malware or spywarecausing silent installations that can steal passwords, track keystrokes, or give scammers remote access to your device.
Red Flags Indicating Fake Shipping and Tracking Messages
So how can you tell the difference between a legitimate message about a delivery you're actually waiting for and one of these scams? Here are the red flags I look for:
- Strange or slightly modified URLs.. Fraudsters use domains that look almost right. Except there's usually one extra letter, a replaced symbol, or a completely unfamiliar extension.
- Requests for additional payment. Real telecom operators do not ask you to pay a “small commission” to release a package. This is an instant distribution.
- A Package You Don't Expect. If the text is vague or you can't match it to a recent order, pause before clicking anything.
- Attempts to deliver at odd hours. “Missed delivery at 6:12” or “Attempted delivery late at night” messages are usually fake. Carriers usually don't work this way.
- Updates that don't match what you see in the app or in the seller's email.. If Amazon says your package will arrive tomorrow, but a random message says it's delayed or stuck, trust Amazon, not the text.
- A language that's designed to rush you. Anything that screams “Immediate action required!” designed to make you stop thinking and start tapping.
If the text causes any of this, I delete it on the spot. When in doubt always check directly with the delivery service provider before opening any links.
WHY YOUR HOLIDAY SHOPPING DATA NEEDS CLEANING NOW
Scammers send out deceptive tracking links that imitate real carriers, hoping that red flags won't be noticed by shoppers in a hurry. (Silas Stein/Photo Alliance via Getty Images)
How do scammers know your address, phone number and shopping habits?
Fraudsters can't magically find out where you live or what you ordered—they buy that information. In fact, there is an entire industry of data brokers built around the collection and sale of personal data. This may include:
- Phone number
- Home address
- Purchase history
- View Templates
- Retailer Accounts and Applications
- Loyalty programs
- Even preferred delivery time.
These data brokers can sell profiles containing hundreds of data about you. And they don't always understand who they are selling to. In fact, some of them were caught on purpose. selling data to scammers.
Once scammers have this data, creating a convincing delivery scam is easy.
But scammers can't attack what they can't find.
I've talked many times about the importance of keeping personal information locked up. And this is just one of the reasons.
Criminals rely on your personal information to target you with this type of scam. They also need at least a phone number or email address to contact you.
So the best way to avoid shipping scams (and, frankly, most other types of scams all year round) is to remove your information from data brokers and people search sites. This will prevent your data from leaking onto the Internet and falling into the wrong hands.
FBI warns email users of increased holiday scams
Fraudsters use fake delivery pages and malware to intercept passwords and gain access to victims' devices. (Martin Allman/Getty Images)
How to remove your personal information from scammers
You can start by searching for yourself online. When searching for different combinations of your name, address, email, and phone number, a variety of people search sites should appear. Simply visit the opt-out page on each site to request removal of your data.
Private database data brokers are a bit more complex. They sell data in bulk, usually to marketers and other third parties. This way you won't be able to check if they have your information. But if you look at which data brokers operate in your area, you can simply send opt-out requests to them all. There is a high chance that they will receive your information.
You can also contact a data removal service. They take the headache out of this process entirely and simply automatically hide your personal information from data broker sites. If you, like me, don't have time to manually check data broker sites and submit deletion requests every few months (as your data will keep reappearing), a personal data deletion service is for you.
While no service can guarantee complete removal of your data from the internet, a data removal service is indeed a smart choice. They don't come cheap, and neither does your privacy. These services do all the work for you, actively monitoring and systematically removing your personal information from hundreds of websites. This is what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk that scammers will link leaked data to information they can find on the dark web, making it harder for them to target you.
Check out my top data removal services and get a free scan to see if your personal information has already been published online by visiting Cyberguy.com.
Get a free scan to see if your personal information has already been published online: Cyberguy.com.
Kurt's key takeaways
Delivery for the holiday The scams work because they fit perfectly into the chaos of December shopping. A timely message and a familiar tracking link are often all it takes to let your guard down. By slowing down, checking with retailers directly, and reducing the amount of your personal information circulating online, you can deny yourself the benefits scammers are counting on. A little caution now can save you a lot of headaches in the future.
Have you received a suspicious shipping message or tracking message this holiday season? If so, tell us what it was like and how you dealt with it by emailing us at: Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Subscribe to my FREE CyberGuy Report
Get my best tech tips, breaking security alerts, and exclusive offers straight to your inbox. Plus, you'll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
Copyright CyberGuy.com 2025. All rights reserved.
