The bank/delivery phishing text

A scam text or call pretends to be your bank or a delivery company, creating urgency to trick you into confirming personal details or clicking a link.

Documented by the FTC & FBI IC3 · reviewed 2026-07-11T18:14:57.874Z

How it works

You receive a text or call claiming something is wrong with your account, a package can't be delivered, or you need to verify information immediately. The message includes a link or phone number and emphasizes that you must act now or face a problem like a frozen account or lost delivery.

What it can look like

You get a text saying 'Your bank account has unusual activity. Confirm your identity now at [link]' or 'Your package failed delivery. Update your address here: [link].' The scammer counts on you feeling rushed and worried enough to click without thinking.

How it unfolds

Scams like this follow a pattern. Knowing the arc helps you notice where you are — and step away before the ask.

You get a text message that looks like it's from your bank or a delivery company. It says there's a problem with your account, a package, or a payment—something that needs your attention right away.

The message includes a link or asks you to call a number. The urgency feels real because it touches something you actually use (your bank, a package you're expecting). You click the link or call the number.

You're asked to 'verify' or 'confirm' information—your login, card number, PIN, or personal details. The website or caller sounds official. You provide some information before something feels off, or you realize the site looks slightly wrong.

You stop and recognise the request doesn't match how your real bank or delivery service normally contacts you. Real organisations don't ask you to confirm sensitive details by text or via links in messages. This is the moment to step away and not provide anything more.

Red flags

A link in the message, especially one that looks slightly off or shortened (real banks rarely text you links to verify info).
Urgent language like 'confirm now,' 'act immediately,' or 'your account will be closed.'
A request to confirm personal details like account numbers, passwords, or Social Security numbers over text or by clicking a link.
The message came without you expecting it—you didn't request a delivery status or report a problem.
The sender's phone number or domain looks generic or slightly wrong compared to your real bank or delivery service.

What to do

Do not click any link or call any number in the message. Instead, go directly to your bank's or delivery company's official website or app by typing the address yourself into your browser.
Contact your bank or the delivery service directly using a phone number from their official website to confirm whether the message is real.
Report the scam text or call to the FTC at reportfraud.ftc.gov.

If it already happened

Acting quickly can limit the damage. You are not alone, and it is not your fault.

Stop all contact with the sender immediately. Do not reply to texts or click any more links from this message.
Contact your bank or card issuer directly using the phone number on the back of your card or on your official account statement. Tell them you may have shared information or clicked a suspicious link, and ask them to monitor your account and change your login credentials if needed.
Change your passwords for any accounts you use (email, banking, shopping) from a device you trust. Use a strong, unique password for each account.
Report what happened to the Federal Trade Commission at reportfraud.ftc.gov. This helps protect others and creates an official record.

Sources

Guidance on this page draws on public, authoritative consumer-protection resources (verified live 2026-07-10). Documented by the FTC & FBI IC3 · reviewed 2026-07-11T18:14:57.874Z.

Spotted this or lost money? Report it at reportfraud.ftc.gov. This is general educational information, not legal or financial advice — and ScamVet never asks for your identity or account details.

Check a message you received →← All scams