Package tracking scams—How to protect your data and orders

There you are! Anxiously waiting for your order to be delivered. Then, as if you had manifested it, you receive a tracking notification. Absent-mindedly, you click on it. But you notice there’s something … off about the message. You may have fallen for a package tracking scam.

These scams are designed to trick you into revealing sensitive personal information. After all, tracking notifications are common enough. Who doesn’t track their deliveries? This is why this scam is so sneaky.

However, with a few precautions and careful reading, you can avoid them. Let’s dive in.

4 common types of package tracking scams

Package tracking scams come in various forms, but their goal is the same: to exploit your trust and curiosity. Here’s a list of the most frequent types:

1. Fake shipping notifications

You receive an email or text claiming your package is delayed or requires action. The link redirects you to a fake site designed to steal your personal information.

2. Phishing emails

Disguised as official messages from known retailers, such as Amazon, or shipping companies, these emails prompt you to "verify" your order details. Clicking through could lead to identity theft or malware installation.

3. Spoofed websites

Fraudsters replicate shipping company websites to capture your login credentials or payment information.

4. Smishing

A text with a fake tracking link seems harmless but often redirects to malicious sites or requests for sensitive details.

Signs of a potential package tracking scam

Spotting a scam is easier when you know the red flags. Here are somethings to look out for before clicking on a fake tracking link:

• Unexpected notifications: Be wary of emails or texts about packages you didn’t order. Scammers bank on the volume of deliveries during busy shopping seasons.
• Generic greetings: Messages that address you as “Dear customer” instead of your name are a red flag. Legitimate companies almost always personalize communications.
• Urgency and threats: Scammers try to pressure you with phrases like “Your package will be returned” or “Act now to avoid extra fees.”
• Suspicious links: Hover over links before clicking. A legitimate Amazon email, for example, will have links that direct to amazon.com, not something like "amazn-support.com."
• Typos and format errors: Many times, suspicious messages include misspellings, misplaced spacing, or alignment issues. 

How to protect yourself from package tracking scams

Taking proactive steps can safeguard your personal information and ensure peace of mind. Here are five tips to help keep yourself secure:

1. Enable two-factor authentication (2FA). By adding an extra layer of security to your accounts, you make it harder for scammers to gain access even if they obtain your password.
2. Be cautious with links. Don’t click on links from unknown senders. Instead, manually enter the shipping website URL into your browser.
3. Verify with the source. If you receive a suspicious message, check directly with the shipping carrier or retailer by using the contact information from their official website.
4. Monitor your accounts. Regularly check bank statements and credit card activity for unauthorized transactions.
5. Stay updated on scam tactics. Scams evolve, so staying informed helps you recognize new tricks.

What to do if you fall victim to a package tracking scam

First and foremost, act quickly. Change passwords for compromised accounts, monitor financial statements for unauthorized activity, and report the scam to your bank or agencies like the FTC.

Also, go a step further and use cybersecurity tools like Norton Genie that can help you detect if a message is a scam or not.

Treat your personal data as a prized possession

As the saying goes, “better safe than sorry.” By recognizing the signs of a potential scam and following these quick tips, you can shop online with confidence. Remember, both your packages and personal information are valuable.