Package Messages Often Exploit the Psychology of "There Might Really Be a Package"
Fake package notifications may impersonate DHL, FedEx, UPS, USPS, postal services, or shopping platforms, stating that the address is incomplete, delivery failed, customs held the package, or a small fee is required. The real targets are usually not the one or two dollars, but rather your credit card information, personal data, account passwords, or one-time verification codes.
Check Original Orders for Verification
After receiving a notification, first confirm whether you actually have a related package. If so, check the tracking number through the shopping platform's order page, the logistic company's official app, or by directly entering the official website's URL—do not log in or make payments using links provided in text messages or emails.
If you have no cross-border orders yet receive customs, clearance, or duty notifications, the risk increases significantly. Scammers often exploit ambiguity to coax you into paying a seemingly small fee.
Pay Attention to the Payment Page More Than the Notification Text
High-risk signals include: the URL is not the official domain, or uses similar spellings, unfamiliar country domains, or overly long subdomains; small payment pages requesting full credit card, CVV, bank login, email password, or text verification codes; messages encouraging you to act immediately with countdowns, returns, destruction, or fines.
Customs Notifications Should Also Be Cross-Verified
Cross-border shopping may indeed incur duties or customs processes, but formal notifications can generally be cross-verified through shopping platforms, logistics companies, or official channels. If a notification only instructs you to make payments through unfamiliar links, and the tracking number cannot be verified on the official website, you should not proceed.
What to Do After Inputting Your Information
If you entered your credit card information, immediately contact your card issuer to verify whether you need to freeze your card or monitor transactions. If you input an email or platform password, change your password through official channels and check the login devices. If you provided a verification code, check if the corresponding account has had its security settings altered. Retain the text messages, sender information, URLs, payment page screenshots, and the data you input.
Logistics, customs, and payment information should be cross-verified against the original order, the official app, or the official website. Processes that only exist in unfamiliar links are not trustworthy.