Is this package delivery text asking for a small fee a scam?

Refuse any delivery fee that starts inside a surprise text link.

Real shipping problems tie back to a shipment record, a sender, a retailer order, or an account session you opened yourself. The scam skips that chain and drops you straight into a courier-styled checkout because the checkout is the trap.

Read the root domain at the end of the link before you touch it.

In https://fedex-parcel-update.net, the root domain is fedex-parcel-update.net, not fedex.com. In https://usps-redelivery-fee.com/track, the root domain is usps-redelivery-fee.com, not usps.com. The brand word at the front is camouflage.

Treat the $1 to $5 delivery balance as the hook, not the charge.

A $2.97 tariff, $3.48 customs balance, or $1.99 postage correction feels too small to fight. The fake page then asks for the same card details needed for a much larger online purchase.

Stop when the text says “your parcel” but gives no real tracking number.

Mass-blast delivery texts stay vague on purpose: “package held,” “address incomplete,” “delivery failed.” A real shipment problem has an order, a sender, a tracking number, or a carrier notice you can match against something you bought.

Ignore the four-hour return threat and verify the shipment outside the text.

“Must be paid within 4 hours” is there to keep you out of the order page and away from the real tracking screen. Parcels do not need a mystery card payment from a local-looking SMS number to avoid instant return.

Quit the page if it asks for a full card to fix a delivery address.

A redelivery address correction and a customs charge are different jobs, but the fake page blends them into one form. That form wants name, phone, billing address, card number, expiry, security code, and email because those fields can be reused.

Do not type a bank code into the courier page after the card form.

That second screen is the dangerous part. The fake delivery site can trigger a real bank challenge, wallet add, or transaction check, then ask you to paste the one-time code back into the fake site as “verification.”

Distrust a delivery text sent from an ordinary personal-looking number.

A message from 917-406-2819 asking for a card payment has the wrong shape for a courier billing event. Criminals use cheap SMS routes and burner numbers, then swap them when blocks start landing.

Open your order confirmation or carrier app before touching the SMS link.

Use the receipt, marketplace order page, or carrier app you already had before the text arrived. If there is a real hold, the same tracking number will show it there without needing the link from the message.

Search the exact tracking number only if the text gives one.

Copy the number by hand into the carrier app or the retailer order page, not into the link from the text. If the message has no tracking number, treat it as a spray-and-pray delivery blast.

Forward the exact scam text to 7726 before deleting it.

7726 is the carrier spam-reporting short code used for unwanted texts. Forwarding preserves the sender number and the lure link so the wireless abuse systems can block repeats faster.

Screenshot the fake checkout if you already opened it.

Capture the URL bar, the dollar amount, the card fields, and any bank-code screen. Those details help your bank understand this was a fake courier payment flow, not a normal failed purchase.

Freeze the card you typed into the fake delivery checkout.

Use your banking app or the service number printed on that card and say the card was entered into a fake package-fee page. Ask them to block the card, check pending authorizations, and look for wallet enrollment or online purchase attempts tied to that entry.

Tell the bank if you typed a one-time code into the courier page.

Say the code appeared after a fake redelivery or customs fee form. That detail changes the bank’s response because the code can approve a transaction, add the card to another wallet, or confirm a risky account action.

Change only the account password you typed into that delivery page.

Start with the retailer, carrier, or email account named on the fake form. If you only entered card details and a billing address, focus on the card first instead of wasting time changing unrelated passwords.