package sitting on porch

Scammers are getting creative with packages – here’s what to watch for

In today’s online shopping world, it’s easy to lose track of what’s arriving and when. Scammers are counting on that. A growing number of fraud schemes involve fake shipping notifications and mysterious packages showing up at your door. If you’ve ever received a message about a shipment you didn’t order – or an unexpected package arrives – you might be the target of a fake shipment scam.

How fake shipment scams work

Scammers impersonate delivery services like USPS, FedEx, UPS, or DHL. They may send a text, email, or social media message claiming:

  • A package is waiting to be delivered
  • A shipping fee needs to be paid
  • There’s an issue with your delivery requiring urgent action

These messages often include a link to a fake website, where scammers try to steal your personal info, install malware, or trick you into entering payment details.

Red flags to watch for:

  • You didn’t order anything, but you’re being asked to pay or click a link
  • The message uses urgent or threatening language
  • It comes from a strange number or email
  • The link leads to a site that looks suspicious or doesn’t match the official company

But wait… there’s also brushing scams

If you receive a package you never ordered, it may be part of a “brushing scam.” Here’s how it works:

  • A third-party seller (often overseas) sends you a low-cost item using your name and address
  • They then post a fake 5-star review using your identity to boost their ratings
  • You’re left wondering why something random showed up at your door

While brushing scams may seem harmless, they could indicate your personal information has been exposed online – especially your name, address, and phone number. And if the package includes QR codes, links, or return requests, they may be trying to phish even more data from you.

If you receive a brushing package:

  • Don’t scan any codes or visit included websites
  • Don’t send money or return the item
  • Report it to the U.S. Postal Inspection Service at [email protected]

Stay safe with these tips

  • Don’t click links in unsolicited shipping texts or emails
  • Verify shipments directly on the official carrier’s website or app
  • Enable tracking notifications through trusted retailers or apps
  • Use strong privacy settings on online shopping platforms

If you’re unsure about a message or package, trust your gut. At Rize Credit Union, we’re here to help protect your financial well-being.

Have questions or need support? Reach out to us.

We’re committed to protecting your account from fraud. Remember, we will NEVER call, email, or text you to ask for your password under any circumstance. If you receive any communication asking for personal information while impersonating the Credit Union, do not respond. Instead, contact us immediately at 800.866.6474.