"Your package is held, pay the fee": the USPS scam

Escudo guide · Updated July 2026

What the scam looks like

The amount is deliberately tiny, a few cents or a dollar or two, because a small number feels harmless and easy to just pay and move on. That is the trap. UPS and FedEx names get used the same way. It is the same idea DHL customers see in Mexico with "paquete retenido" and Correios customers get in Brazil. One script, many flags.

The tells, one by one

• A fee out of nowhere. You did not agree to any delivery charge. Real postage owed is handled at the door with a slip the carrier leaves, or in your official carrier account, not by a surprise text.
• The web address is not the real one. USPS uses usps.com. Scam links look like usps-redelivery.top, usps-track-fee.xyz or us-postal-reschedule.info. Anything hyphenated onto the name, or with an odd ending, is fake.
• It wants your card on a web page. The "fee" is bait to reach a form that asks for your full card number, expiration, security code and often your address. That is the real prize.
• You were not even expecting a package, or you were, because most of us usually are. Scammers send millions of these knowing some will land on someone waiting for a delivery.
• The message is vague about what the package is. A real delivery update ties to a specific order and sender. The scam text cannot name what you bought or where from, because it never knew. It just says "your package" and hopes.

Why the fee is so small

It is worth understanding the trick, because it is clever. Thirty five cents or a dollar is beneath the amount you would call your bank about. It feels too trivial to be a scam, so your guard drops. But the fee is never the goal. The scammer does not want your dollar. They want the card number, expiration, security code and address you type onto the payment page to send it. With those, they can charge you for far more, or sell the details on within minutes. A tiny ask is the doorway to a large loss. The moment a surprise "small fee" arrives by text with a link, that smallness should make you more suspicious, not less.

What to do, in order

1. Do not tap the link. Not even out of curiosity.
2. Check the tracking yourself. Go to usps.com directly, or use the USPS app, and enter the tracking number from the store you actually ordered from.
3. If you use USPS Informed Delivery, real updates live there, not in a random text with a link.
4. Report it, then set it aside. Forward the text to 7726 (it spells SPAM), then report it to the FTC at ReportFraud.ftc.gov. On iPhone you can also report it as junk.

Already tapped it or entered your card?

• Call your bank now using the number on the back of your card. Ask them to freeze the card and watch for charges.
• If you entered your address and details, be alert for follow up calls pretending to be "fraud support". The same gang often calls next to finish the job. Hang up and call your bank yourself.
• Change any password you reused on the fake page.
• Report it at ReportFraud.ftc.gov and tell your bank. For an after the fact report you can also call your local police non-emergency line. Call 911 only if someone is in immediate danger.

For the calm, step by step version, see you already clicked a scam link. The cousin of this scam is the fake bank text, and it often arrives the same week.

What if it reaches my mom or dad?

A package fee text is easy to fall for precisely because it is boring and small. No drama, just "pay a dollar". The people most at risk are the ones who never see a guide like this. The same delivery scam runs in Brazil as fake Correos messages and in Mexico as fake Correos and DHL texts. It is one playbook, translated per country. Full picture in how SMS scam gangs actually operate.

That is what the Escudo app is for: it helps filter these known scam patterns on the iPhone and quietly sets them aside before they are read. It does not promise to catch every trick, and it cannot tell you whether one specific message is a real threat. Nothing is deleted, it is only moved to a junk folder, and your messages never leave your phone.