Americans will spend $207 billion online over the 2021 holidays, according to Adobe’s annual seasonal shopping forecast. That’s up 10 percent from 2020 as consumers increasingly gravitate toward the ease and convenience of e-commerce. Scammers love the trend, too: They’ve developed myriad tricks to take advantage of the proliferation of packages, especially during the holiday season.

Their primary ploy is a phony delivery notification, a scam that really ramped up amid the surge in stay-at-home shopping during the coronavirus pandemic. You’ll get an email or text message that claims to come from the U.S. Postal Service or a major delivery company like FedEx or UPS. The message may say you need to confirm an order so it can be delivered, or that an unsuccessful attempt was made to drop off a package and you need to schedule another. Clicking a link will take you to a website where you can straighten things out.   

In all likelihood, it’s a ruse. The scammer is hoping you order so many things online that you can’t keep track of all your purchases, or that you’ll assume it’s a gift from a friend or relative. The link takes you to a bogus site where you’ll be asked to enter personal or financial data, enabling a crook to use it for identity theft. The fake site might also be a launchpad for malware that harvests sensitive information from your device. 

3 Ways to Avoid a Package Delivery Scam

There are low-tech variations, too. Scammers might call you posing as employees from a delivery service, saying they need a credit card number or other private data to reschedule a drop-off. Or they’ll leave a failed-delivery notice on your door with a number to call; if you do, the person on the other end will try to talk you into providing personal information to collect your purported package.

Some package crooks resort to even simpler means. These “porch pirates” watch for delivery vans that leave legitimately purchased merchandise at consumers’ doorsteps, ideally when the targets aren’t home, then swoop in and make off with the goods. In a November 2020 survey of 2,000 consumers by market-research firm C+R, 43 percent said they’d had a package stolen from a doorstep or porch, and nearly two-thirds of that group said it had happened more than once.

Warning Signs

• You get an email or other communication about a delivery of something you don’t remember ordering.
• The message presses you to urgently make a payment or provide personal or financial information to facilitate a delivery.
• The message includes misspellings or poor grammar.
• A supposed delivery company email has a sender’s address or link with a slightly different version of a business name, such as fedx.com.

Do’s

• Do be wary of unsolicited phone or electronic communications from a delivery service. Companies will usually alert you to a failed delivery by leaving a notice on your door.
• Do keep track of your online orders and their shipping status. Knowing what’s coming and when makes it easier to spot fake delivery messages.
• Do hover your cursor over links in a supposed delivery email to display the actual target URL.
• Do rely on safe ways to communicate with delivery companies. Call a confirmed customer-service number, or log on to a company’s official website and use the chat function.
• Do consider these steps to thwart porch pirates:
  • Ask neighbors to pick up your deliveries when you’re not home.
  • Have packages sent to your workplace or the home of a nearby friend or relative. 
  • Use a parcel-delivery locker. The U.S. Postal Service and Amazon offer locker delivery at select locations at no extra charge.

Don’ts

• Don’t respond to an unsolicited email claiming to be from a delivery service that asks you to provide, update or verify personal information.
• Don’t click on a link or open an attachment in an unsolicited email or text message that appears to be from a delivery company.
• Don’t give out personal or credit card information to a caller. Instead, find and call the company’s official customer-service number and ask if they were genuinely trying to contact you about a delivery.
• Don’t reveal your user ID or password for a delivery company’s website to a caller, or to anyone else.
• Don’t call the number on a delivery notice left on your door. If the notice names a company, call its official customer-service line to check on a supposed delivery.
• Don’t rely on official-looking logos or professional-sounding language as proof of authenticity. Scammers study and copy companies’ actual communications to make their ploys look and sound convincing.

Reprinted from AARP Fraud Watch Network