As online shopping has skyrocketed in popularity, so too have the text messages we receive from retailers and shipping companies about our orders and deliveries. For many of us, getting an SMS notification from FedEx about a package‘s status is not only unsurprising – it‘s expected.
However, our comfort with these types of business messages has created an opening for scammers to exploit. By impersonating trusted brands like FedEx via text, fraudsters aim to deceive consumers into giving up sensitive info or money. And their efforts seem to be paying off – SMS phishing ("smishing") increased 328% in 2020, with FedEx being one of the most frequently faked senders.
So how can you tell the difference between texts from the real FedEx and scammers pretending to be them? It starts with knowing how the company actually uses SMS messaging. We‘ll break that down and show you examples of genuine FedEx texts compared to fraudulent ones. You‘ll also learn the psychology behind these scams, how to report them, and more.
How FedEx Really Uses Text Messaging
FedEx only sends customers texts for two reasons: FedEx Delivery Manager updates and its SMS tracking service. Any other messages claiming to be from FedEx are likely scams. Let‘s look at how these legitimate services work:
1. FedEx Delivery Manager
FedEx Delivery Manager is a free service that allows residential customers to view and manage their incoming packages. Once enrolled, users can opt-in to receive delivery status notifications via SMS.
These official FedEx texts inform customers when their package is:
- Scheduled for delivery (with the delivery date)
- Out for delivery (day of)
- Delivered
Customers can also engage with the texts to:
- Authorize release of the package without a signature
- Request the package be held at a FedEx location for pickup
- Leave delivery instructions
- Provide delivery feedback
Notably, you must proactively sign up for Delivery Manager and agree to receive texts – you won‘t get these messages out of the blue.
2. SMS Tracking Updates
For quick updates on a package‘s whereabouts, you can also enroll any FedEx tracking number in SMS notifications by texting "FOLLOW" and the 12-22 digit number to 988-097-1255. After confirming your enrollment, you‘ll receive periodic progress alerts as your package makes its journey.
Here‘s a sample of the texts you‘ll get:
FedEx: For tracking number 123456789012, reply with FOLLOW. For help, HELP.
Welcome to FedEx! 123456789012 is now enrolled in SMS tracking alerts.
Current status: Picked up. Scheduled delivery: 10/01/2022. For more info, visit fedex.com. To stop, reply END.
123456789012 has shipped from MEMPHIS, TN. Scheduled delivery: 10/01/2022. Text INFO for more options. fedex.com/t/123456789012
123456789012 is on FedEx vehicle for delivery today. No action required. Estimated delivery: 12pm-4pm. fedex.com/t/123456789012
123456789012 delivered at 2:34pm signed by J.SMITH at front door. Reply STOP to cancel msgs. fedex.com/t/123456789012While 988-097-1255 is a legitimate FedEx number, the company will NEVER contact you from it unsolicited. The ONLY reason you should get a message from this number is if you texted it first to begin tracking a package.
Recognizing Fake FedEx Texts: Red Flags to Watch For
Now that you‘re familiar with FedEx‘s actual texting practices, let‘s compare an official message to a scam one:
| Real FedEx SMS Tracking Alert | Fake "FedEx" Scam Text |
|---|---|
| 123456789012 is on FedEx vehicle for delivery today. No action required. Estimated delivery: 12pm-4pm. fedex.com/t/123456789012 | FedEx Express: Please confirm the delivery address for your package 5G2J61 by completing the form at bit.ly/secure-del within 24 hours or it will be returned to the sender. |
Even at a glance, the fraudulent message raises some questions. Here are the top warning signs to look out for that indicate a text isn‘t really from FedEx:
1. You weren‘t expecting it
Unless you‘re actively tracking a package or signed up for Delivery Manager alerts, a "FedEx" text should immediately make you suspicious – especially if it claims your package is "waiting" or that you need to take urgent action to avoid delays/extra fees.
2. It makes outlandish threats or promises
To provoke a quick, unthinking reaction, scammers often concoct scenarios that sound either too good or bad to be true. Resist the urge to comply with any supposed FedEx text making overblown claims – your package is NOT about to be "returned to sender" and you did NOT win a big cash prize.
3. It‘s full of typos and errors
Strange capitalization, atrocious spelling, excessive punctuation (!!!!), and messy formatting are all red flags. Legitimate FedEx messages use professional language free of glaring mistakes.
4. It contains sketchy links
Embedded links that lead to slightly "off" URLs are a common tactic for directing victims to phishing pages or malware downloads. For example, a fake FedEx text might include fedx.claim-zy.biz instead of fedex.com. When in doubt, don‘t click!
FedEx will never ask you to provide sensitive details like credit card numbers, login credentials, etc. via unsecured text message. Don‘t "verify" anything with a sender pushing you to cough up private data.
6. It‘s addressed to the wrong person
Getting a "FedEx" alert for someone else is a clear sign something is amiss. The company knows who its customers are and wouldn‘t text the wrong person about their package.
The Psychology of FedEx Text Scams
At its core, the strategy behind these scams is not so different from other phishing attacks – trick the victim into believing the message is from a trusted sender, create a sense of urgency, and demand sensitive information or payment to resolve the "issue".
There are a few psychological factors that make SMS an especially effective medium for scams:
- Unfamiliarity with "smishing" compared to email phishing: SMS scams are less well-known, so victims may be more likely to fall for them.
- Trust in phone numbers: We tend to view texts as more secure/verified than email, especially when they come from short 5-6 digit numbers like FedEx‘s own 988-097-1255.
- Assumed urgency: Text messages feel more immediate, so we‘re primed to act quickly without much thought.
- Smaller screens & less detail: It‘s harder to inspect URLs and sender info in texts compared to email, making it easier to miss suspicious elements.
By spoofing FedEx‘s real number and crafting messages that mimic official branding/lingo, scammers aim to lull victims into a misplaced sense of trust. From there, they rely on sneaky tricks like vague "package" references (notice the random numbers/letters like 5G2J61 instead of a real tracking number) and scary consequences for inaction ("your package will be returned!") to compel victims to "act now!" instead of stopping to question the text.
What to Do If You Receive a Suspicious FedEx Text
If something seems "off" about a text claiming to be from FedEx, don‘t ignore your instincts. Take these steps to protect yourself and others:
- Do NOT reply, click any links, or download anything: Doing so could put you at risk for malware, identity theft, and more.
- Contact FedEx to check if it‘s legit: Forward the suspicious text to [email protected]. You can also verify any tracking number on fedex.com (be sure to type the URL yourself vs. using links in the message).
- Block the number and delete the text: Once you‘ve confirmed it‘s a scam, prevent future messages and get rid of it.
- Alert your financial institutions if you lost money: Call your bank or card issuer right away if you sent payment or info to the scammer so they can watch for fraud and potentially reverse charges.
- Report it to authorities: File reports with the FTC, FBI IC3, your carrier‘s spam text reporting number (e.g. forward to 7726), and your state Attorney General. While they may not be able to recover lost funds, reports help combat future scams.
Stopping FedEx Text Scams At the Source
Of course, the onus shouldn‘t be entirely on consumers to fend off these fraud attempts. Shippers like FedEx must also take proactive measures to make their official SMS programs more resistant to spoofing and educate customers about potential scams.
To start, FedEx could improve its caller ID for 988-097-1255 to make it harder to mimic – for example, by enabling branded Verified SMS that displays the full company name and a trust mark. Instituting a two-way verification system for enrolled tracking numbers, similar to Twitter‘s blue check, could also help customers distinguish real FedEx tracking texts from phony ones.
Furthermore, FedEx should run dedicated awareness campaigns across its website, app, and other owned channels to explicitly warn users about the prevalence of scam texts and provide visual examples contrasting legitimate messages with fraud. By transparently acknowledging this growing threat and empowering customers to confidently ID real vs. fake messages, FedEx can foster continued trust in its brand and official communications.
The Growing Threat of SMS Scams for Retailers & Logistics Providers
As e-commerce adoption increases and more consumers grow accustomed to receiving delivery updates via text, retailers and the shipping companies they depend on must stay vigilant against scammers abusing their platforms and good names.
Notably, scam texts impersonating these types of businesses surged in 2020 as online shopping boomed during the COVID-19 pandemic:
| Brand Impersonated | SMS Phishing Increase in 2020 |
|---|---|
| Amazon | 209.7% |
| FedEx | 275.2% |
| UPS | 77.4% |
| USPS | 222.9% |
| DHL | 346.8% |
Source: 2021 State of the Phish Report
This trend shows no signs of slowing down, as fraudsters continue to capitalize on our reliance on digital communications and the sense of urgency around receiving important packages. It‘s likely we‘ll see even more sophisticated tactics emerge to deceive consumers, like scammers finding ways to verify sketchy numbers or intercept/hijack real shipping SMS threads to spread malicious links.
As such, it‘s never been more crucial for retailers and shippers to make combating these scams a top priority – both through tighter internal security controls and greater consumer education efforts. By joining forces to present a united front against fraud, these businesses can preserve the convenience and trust that makes SMS such a valuable customer communication tool in the first place.
Key Takeaways
- FedEx only sends customer texts for two reasons: FedEx Delivery Manager notifications and SMS tracking alerts. Messages about anything else are likely scams.
- Hallmarks of scam texts include: unexpected timing, wild claims/threats, typos and strange formatting, suspicious links, requests for personal info, and the wrong recipient name.
- Never click, reply, or share info if you suspect a FedEx text is a scam. Instead, report it to FedEx and authorities like the FTC and FBI.
- FedEx could combat "smishing" scams by deploying anti-spoofing tech, educating customers, and clearly distinguishing its official texts.
- Retailers and logistics providers will need to work together to stay ahead of scammers as reliance on digital communications (and related fraud) grows.
