The 30-second version
The fake package text is nothing new, but it has changed scale: since the spring of 2026, scammers have been attaching an AI-generated photo of a parcel to their texts, with your name on the label, and sometimes a voice message imitating a delivery driver. The goal: get you to tap a link, pay a “small fee” and hand over your card details.
The golden rule: no real carrier asks you to pay by text message to receive a package. When in doubt, tap nothing, check the tracking on the official site, and use our analyzer below.
“Sorry, we couldn’t deliver your package.” The message lands on your phone, with a photo of a box bearing your name sitting on a doormat. It all looks real. And yet that package does not exist: the photo was manufactured by an AI. Here is how this newly formidable scam works, how to spot it every time, and what to do if you have already fallen for it.
An “ordinary” scam that AI turned dangerous
Package-delivery phishing (or “smishing“, a blend of SMS and phishing) has been around for years. The principle: a text or an email impersonates a carrier, USPS, FedEx, UPS, DHL or Amazon, and invents a delivery problem to push you toward a booby-trapped link.
What changed in 2026 is the realism. Scammers no longer settle for a typo-ridden message: they use artificial intelligence to make it credible at first glance.
What AI brings to scammersTwo new tricks showed up in the spring 2026 campaigns: an ultra-realistic photo of a package (sometimes held by a “driver”), generated automatically with your name and your city on it; and, since April 2026, voice messages that imitate a delivery driver using consumer-grade voice synthesis tools.
These elements are produced at scale from personal data (first name, last name, city, cell number) circulating after data breaches. That is why the message greets you by name and feels “made for you”. The US Postal Inspection Service and the FTC have both issued warnings about the surge in fake delivery texts.
How the scam unfolds, step by step
The script is almost always identical. Knowing it is already halfway to stopping it.
- A personalized text. You get a message from a cell number or an unknown sender: “Your package is on hold”, “A customs fee is required”, “The driver attempted delivery”…
- An AI-generated photo. The message attaches an image of a box with your name on it, or of a driver holding your parcel. It is fake, but realistic enough to erase your last doubts.
- A link that manufactures urgency. “Reschedule within 24 hours or your package will be returned to sender.” The fear of missing a delivery makes you act fast, without thinking.
- A very convincing fake site. The link leads to a near-perfect copy of the carrier’s website, asking for a “small fee” ($1 to $3) for redelivery or customs.
- The card details get stolen. You type in your card number: that was the real objective all along. The tiny amount is only bait to harvest your details.
- The fraud, right after. Your data is often used within hours, sometimes followed by a fake bank representative calling to “block a suspicious transaction”.
Suspicious delivery message analyzer
Just received a text, an email or a call about a package and something feels off? Check below what the message contains. The tool rates the risk level in one click. Nothing is sent or stored: everything stays in your browser.
Is this message a scam?
Check every element present in the message you received, then run the analysis.
This is almost certainly a scam
You checked 0 red flag(s), including at least one near-certain sign of fraud. Tap no link, pay nothing, share no data. A real carrier never operates this way.
This message is doubtful, stay careful
You checked 0 red flag(s). Several elements are typical of phishing. When in doubt, treat the message as fraudulent and check for yourself on the official site.
One signal worth taking seriously
You checked 0 red flag. It is not necessarily a scam, but this kind of detail is enough to justify checking directly with the carrier, without going through the link you received.
No obvious signal… but stay careful anyway
You checked nothing. Careful: the absence of a red flag does not prove a message is safe. When in doubt, never tap a link received by text and go straight to the carrier’s own website.
The right move, whatever the verdict: tap no link received by message. Check the tracking directly on the carrier’s official site or app, using your order number. Forward the suspicious text to 7726 (SPAM) and report it at reportfraud.ftc.gov.
Still unsure about a message? You can also copy and paste it into an AI and ask it to spot the inconsistencies, without ever giving it your card details.
The red flags that should stop you
Beyond the analyzer, keep these recurring markers in mind. A single one is often enough to give the scam away.
A payment request
Customs charges, redelivery fees, a “tax” of a couple of dollars.
No carrier asks for payment by text in order to deliver.
A shady link
Shortened URL, a domain that is not the official site, typos in the address.
Press and hold the link (or hover) to reveal the real address.
A personal cell number
The text comes from an individual number, or from abroad.
Real carriers use identified short codes or verified sender names.
Manufactured urgency
“Final notice”, “within 24 hours”, “package returned to sender”.
The pressure exists to short-circuit your thinking.
A surprise package
You are not expecting anything, or not from that carrier.
Check your orders: no shipment in progress means no package.
A photo or a voice
Image of a box with your name, audio imitating a driver.
New in 2026: those elements are AI-generated.
How to spot an AI-generated photo (or voice)
AI images keep getting more realistic, but they usually leave clues. Take three seconds to zoom in before believing a package photo.
- Hands and fingers: a driver with an extra finger, a warped hand or odd fingernails is an AI-image classic.
- Text and logos: on an AI-generated box, the carrier logo is often slightly blurry or distorted, and the “printed” text is unreadable or incoherent.
- The barcode: the bars and digits match nothing scannable, or are strangely aligned.
- Shadows and light: a shadow that does not follow the light source, inconsistent reflections.
- An overly smooth look: artificially blurred background, textures that are too perfect, or details that seem to melt into each other.
For the voiceA synthetic voice often has an intonation that is too even, with no breathing, artificial transitions or a strange pronunciation of your name. When in doubt: hang up and call the carrier back on its official number, never the one left in the message.
Careful: the clues are disappearingVisual flaws are getting rarer as AI models improve. Never rely on “the photo looks real” alone: the only reliable benchmark remains the golden rule, that a real carrier never asks you to pay or to enter a card by text.
Real carrier or fake message? The comparison
When in doubt, compare the message you received with how a real carrier behaves.
| Situation | Real carrier | Fraudulent message |
|---|---|---|
| Payment requested by text | Never | “Small fees” for customs or redelivery |
| Card details | Never by text or email | Card number, CVV, code received |
| Link | To the official site, exact address | Shortened URL or imitated domain |
| Sender | Short code or verifiable name | Personal cell number or unknown |
| Tone | Neutral, informative | Urgency, threat of returning the package |
| Verification | Possible in the app with tracking | Only through the link provided |
The habits that keep you out of the trap
A few simple reflexes neutralize 99% of these attempts.
- Never tap a link received by text or email about a package. Go directly to the carrier’s website or app.
- Track your parcels at the source: use your order number on the official site, never the link in the message.
- Never pay a “fee” demanded by message. Legitimate customs charges are handled differently, never through a link sent by text.
- Check the logic: do you actually have a shipment in progress with that carrier? If not, the message is fake.
- Protect your data: limit where you share your number and address, and be wary of questionable online forms.
- Turn on your bank’s protections: spending limits, in-app confirmation, real-time alerts.
I clicked or paid: what to do right now
No panic, but move fast: every minute counts to limit the damage.
- Freeze the card immediately. Call your bank or use the app to lock the card and report the transaction. That is the absolute priority.
- Keep the evidence. Save the text, the email, the screenshots, the sender’s number and the fake site’s address.
- Dispute the charge. Under the Electronic Fund Transfer Act and card network rules, reporting unauthorized transactions quickly protects your right to a refund.
- Report the fraud at reportfraud.ftc.gov, and to the US Postal Inspection Service at uspis.gov if USPS was impersonated. Online fraud can also be reported at ic3.gov.
- Forward the message to 7726 (SPAM). It is free and it helps your carrier block the campaign.
- Watch your accounts over the following days and be suspicious of any “bank representative” who calls you: that is often the sequel to the scam.
The “fake bank rep” trapAfter stealing your data, a scammer may call pretending to be your bank, offering to “secure” your account. A real bank will never ask for your PIN, nor ask you to approve a transaction you did not start. Hang up and call back the official number printed on the back of your card.
Where to report a package scam
reportfraud.ftc.gov: Federal Trade Commission
uspis.gov: US Postal Inspection Service
ic3.gov: FBI Internet Crime Complaint Center
Your bank: card freeze and chargeback
Carrier fraud pages: USPS, FedEx, UPS
AI as the scammer’s weapon… and as your shield
Here is the paradox: the artificial intelligence used to manufacture those fake photos can also help you unmask the scam. Faced with a doubtful message, you can describe it or paste its content into an AI assistant and ask it to analyze the red flags: whether the link address is consistent, the tone, the payment request, the classic inconsistencies.
With a chatbot like Nation AI, free to use and with no sign-up, you can submit the text of a suspicious message and get a critical read in seconds. It is a good complementary reflex, but keep two rules in mind: never give your card details to an AI, and a “this looks fine” answer does not replace checking directly on the carrier’s official website.
Good to knowUnderstanding how an AI builds an image helps you catch the fakes. To see what these tools can do, at their best and at their worst, our overview of AI image generation and our roundup of AI detectors are good starting points.
Frequently asked questions
What is the new package delivery scam that uses artificial intelligence?
It is an evolution of the fake delivery text. Since the spring of 2026, scammers attach an AI-generated photo of a package, often with your name on it and sometimes held by a “driver”, and in some cases a voice message imitating a delivery driver. The goal has not changed: make you tap a link, pay a tiny fee and hand over your card details.
How can I tell if a USPS text is fake?
Ask yourself three questions: were you genuinely expecting that package? Does the message ask for a payment or for your card details? Does the link address match the carrier’s real website? A single suspicious answer should stop you. USPS does not send unsolicited texts about a package unless you signed up for tracking alerts, and it never asks for payment by text. You can also use the analyzer earlier in this article.
Are package delivery texts always a scam?
Legitimate delivery notifications do exist, but as soon as you are asked to pay or to enter a card, it is fraud in the vast majority of cases. A real carrier never asks for payment by text to deliver a package. These messages are phishing aimed at your money and your data.
How do you recognize an AI-generated photo?
Zoom in and look for the flaws: warped hands or fingers, a blurry logo, an incoherent barcode, shadows that do not match the light, textures that are too smooth. Those clues are getting harder to see, though: never trust the look of a photo alone, trust the golden rule instead (no payment, no card by text).
Does USPS charge a redelivery fee by text?
No. Redelivery and package pickup are arranged for free on usps.com, never through a payment form received by message. If a genuine customs charge applies to an international shipment, it is handled through official carrier channels, never through an unsolicited link.
I clicked and paid. What should I do?
Freeze your card immediately, keep the evidence (text, screenshots, site address), dispute the charge with your bank as an unauthorized transaction, report the fraud at reportfraud.ftc.gov and to uspis.gov, and forward the message to 7726. Watch your accounts and be wary of a supposed bank representative calling you in the days that follow.
A message giving you doubts?
Paste a suspicious text or email into Nation AI, the free AI assistant, and have it analyzed in seconds, with no sign-up.
Sources: Federal Trade Commission (consumer alerts on delivery-scam texts) ; US Postal Inspection Service (smishing warnings) ; FBI Internet Crime Complaint Center ; carrier antiphishing pages (USPS, FedEx, UPS). General prevention information, not a substitute for guidance from the competent authorities.
