Don’t Fall for the UPS “Driver Can’t Find Your Address” Scam

Scammers are getting more creative in their attempts to steal your personal information and money. One scam that has been making the rounds recently involves fake UPS delivery notifications. The scam starts with a text message or email claiming to be from UPS, saying their driver can’t locate your address and prompting you to provide your address details to “reschedule delivery.” Don’t fall for it! This article will provide an in-depth look at how the UPS “our driver can’t find your address” scam works, who’s behind it, and most importantly, how to avoid becoming a victim.

UPS Scam

Overview of the UPS “Our Driver Can’t Find Your Address” Scam

The UPS “our driver can’t find your address” scam is a prime example of a phishing scam targeting unsuspecting victims. Scammers send text messages or emails pretending to be from UPS, informing recipients that the UPS driver is unable to locate their address and subsequently, unable to complete their package delivery.

The message will typically include a fake UPS tracking number and a link to a fraudulent website masquerading as a legitimate UPS site. If recipients click on the link, they are led to a convincing but fake UPS lookalike site and asked to enter their personal details, including full name, address, phone number, and sometimes even credit card information, under the guise of “rescheduling delivery.”

Here is how a fake UPS message might look:

[UPS] Tracking Number 1Z76176a0716591126 Our driver can’t find your address, and your package is still pending. And our driver will redeliver tomorrow. Please provide your complete address at hxxps://ups-tracking-id.23658.delivery/redelivery#id52775 to schedule redelivery.

In reality, these sites are designed to steal personal and financial information from victims, which is then either used directly for financial fraud or sold on to other cybercriminals. The UPS brand is being hijacked to execute a phishing scam aimed at stealing identities, committing payment fraud, and gaining access to private information.

Scammers Leverage UPS’s Brand Recognition

UPS is one of the most recognizable delivery companies worldwide. Scammers capitalize on this familiarity and trust in the brand to create convincing phishing scams. By claiming to be from UPS and citing delivery issues, they trick unsuspecting recipients into divulging sensitive personal data under the assumption it is required to resolve the supposed “delivery problem.”

The UPS phishing scam emails and texts are crafted to create a sense of urgency, insisting the package cannot be delivered unless the victim provides their details. This pressures recipients to act quickly without carefully examining the situation first. Sadly, this results in people falling for the scam and surrendering their personal information to criminals.

Fraudulent Websites Mirror Legitimate UPS Sites

An integral part of the scam is the fraudulent website victims are directed to. Scammers design the sites to precisely mimic the real UPS website, incorporating the same branding, colors, fonts, and overall appearance. The fake sites even utilize UPS terminology and tracking tools to appear more authentic.

For unsuspecting users, especially those accessing the site quickly on a mobile device, the imitation sites are very convincing. However, small discrepancies like slightly different URLs and web addresses should raise red flags. But most people won’t notice this, making them more likely to enter their details without realizing it’s a scam site.

Delivery Issues Used as Scam Pretense

The supposed “delivery issue” is the premise allowing scammers to request personal details from victims. The text messages and emails claim the driver is unable to locate the recipient’s address and subsequently cannot complete the delivery.

Some versions allege the package is lost or missing and must be reordered. Others state delivery will be attempted again the next day, but the recipient must confirm their address first. Either way, the supposed problems with the delivery are all a fabrication designed to elicit information from recipients.

No matter what delivery issue is cited in the message, it’s a fraudulent pretext to secure data from victims. Legitimate delivery delays are dealt with internally by UPS, not by contacting customers asking for information.

Credit Card Information Sometimes Requested

In some reported versions of the scam, victims are asked to enter credit card details after providing their personal information. Scam messages claim it is for a small shipping or redelivery fee, usually between $3-$10.

This secondary request for payment information just furthers the fraud once the scammers have already secured names, phone numbers, and addresses from victims. Credit card data enables them to directly commit payment fraud using victims’ financial information.

No official UPS communication regarding packages will ever solicit payments from recipients. Anything requesting credit card information is undoubtedly a scam attempt.

How the UPS “Our Driver Can’t Find Your Address” Scam Works

Now that we’ve examined the overview of this scam, let’s break down step-by-step exactly how scammers execute it to compromise victims:

Step 1 – Victims Receive Unsolicited Texts or Emails

The first step in the scam is victims receiving unsolicited texts or emails without requesting or expecting any tracking updates from UPS. The messages will be sent from random phone numbers or unfamiliar email addresses, not official UPS contacts.

The content references a UPS tracking number that victims don’t recognize and addresses them in generic terms like “Dear customer” instead of their name. Despite these discrepancies, scammers hope recipients won’t pick up on them.

Step 2 – Scam Messages Claim Driver Can’t Locate Address

The message next informs victims that the UPS driver is unable to find or locate their address and therefore cannot complete the scheduled delivery. Some variants specify the package is lost, damaged, or must be reshipped entirely.

These claims are designed to elicit concern from recipients about their “missing” or “undeliverable” package. This sense of worry pressures victims to remedy the supposed issue.

Step 3 – Fake Tracking Numbers Used

Although the scam messages reference a UPS tracking number, it’s completely fabricated. The tracking numbers are fake and won’t match any actual shipments victims are expecting.

Scammers randomly generate fake numbers or pull inactive tracking numbers from UPS’s system to cite in their phishing attempts. This makes the scam harder to detect than if no tracking number was provided at all.

Step 4 – Recipients Instructed to Visit Fake UPS Sites

After establishing worry about the lost or undeliverable package, the scam messages then instruct recipients to visit a website link to resolve the delivery problem. These links send victims to sophisticated fake UPS websites crafted to mirror legitimate UPS sites.

On the fraudulent sites, victims are asked to enter their personal details like name, phone number, home address, and sometimes credit card information. However, they are actually handing over this data directly to scammers.

Step 5 – Victims Surrender Personal and Financial Information

Victims reading the message quickly on a mobile device with small text may not realize they are on a fake phishing site rather than UPS.com. Believing the site to be legitimate, victims will submit the requested personal and financial information.

In other cases, even if victims identify discrepancies, scammers leverage the created sense of urgency about the “delivery issue” to get victims to share their details anyway before thoroughly vetting the situation.

Step 6 –Scammers Steal and Misuse Victims’ Information

Once victims enter their information on the fraudulent sites, scammers immediately steal it. Victims’ personal data is then either used to commit identity theft or sold on the dark web to other cybercriminals.

Stolen financial information is leveraged to make fraudulent purchases, siphon money from accounts, or open new lines of credit. Meanwhile, victims are left compromised, with no package to track down or delivery issue to resolve.

How to Spot the UPS “Our Driver Can’t Find Your Address” Scam

While scammers are constantly evolving their techniques, there are key signs you can look for to detect and avoid this UPS phishing scam:

You Aren’t Expecting a Package

Always question notifications about incoming or missing UPS deliveries if you haven’t ordered anything. Scammers send messages referencing tracking numbers to make the notifications seem credible. But if you aren’t expecting a real package, it’s likely a scam attempt.

Generic Greetings are Used

Legitimate messages from delivery companies address customers by name. Greetings like “Dear customer” suggest scammers don’t have your specific details and are sending mass messages. Real notifications reference customers by first name or full name.

Links Go to Unofficial Domains

Carefully inspect where any embedded links in texts/emails redirect you to. Scammers use links that route to unrelated, odd domains rather than legitimate UPS subpages. Links should always go to UPS.com sites when coming from UPS.

Problems Require Personal Details

UPS never requires personal information like your social security number or full credit card number to remedy delivery issues. Requests for details beyond just an address to “correct” the problem reveal a phishing attempt’s real motive.

Asked to Re-Enter Delivery Preferences

Getting asked to re-confirm delivery preferences you never set in the first place is a huge red flag. Whether it’s re-entering address details or resetting notifications, real UPS requests are for info you actually provided before.

Requests are Pushy and Urgent

Scare tactics pressure victims to act quickly before evaluating the situation. But legitimate companies won’t threaten dire consequences if you don’t rush to provide personal or financial details immediately. High-pressure requests heighten scam risk.

Stay vigilant for these types of red flags when notified about delivery issues. If anything seems suspicious, contact UPS directly through official channels to validate before providing any information. Carefully inspecting communications is the best defense against phishing scams.

What To Do If You Are Targeted By This UPS Scam

If you receive a suspicious text or email claiming to be from UPS about an undeliverable package or missing address, here are crucial steps to take:

Avoid Clicking Any Links

Do not click on any website links contained in scam texts or emails without verifying their legitimacy first. These links direct victims to fake sites to steal their information. Avoid clicking prematurely before proper scam evaluation.

Review Message Details Thoroughly

Carefully review the message, assessing whether you recognize the tracking number cited and are actually expecting a UPS delivery. Check that your individual name is referenced and official UPS contacts are listed.

Scrutinize everything in the communication, not just the content itself. This helps identify discrepancies suggesting it’s a scam attempt.

Verify the Sender

The texts and emails are not sent from official UPS phone numbers or email addresses. Carefully check the sender details without clicking any links first. Search online to confirm whether the listed number, email, or domain matches official UPS contact information.

Any unknown or unverified sender details strongly indicate a scam attempt. Never contact unfamiliar senders about supposed package issues.

Check the Link Destination

Validate where any embedded links go before clicking them. Hover over the links on desktop or press-and-hold on mobile to reveal the actual URLs or IP addresses they direct to. Cross-reference these against the official UPS website to identify spoofing attempts.

Contact UPS Directly

Do not contact the number or email address the message came from. Look up official UPS helplines and contact them to inquire about the text or email referencing a tracking number and delivery issue. UPS can confirm whether it’s a valid notification or scam attempt.

Report the Message

Reporting scam delivery notifications helps alert UPS to new phishing methods impersonating their brand. File reports about fraudulent emails with spam and cybersecurity watchdogs to possibly block senders. Flag suspicious text messages to your phone carrier as well.

You can also forward scam UPS emails to phishing@UPS.com so UPS can investigate them and strengthen email protections. The more reports filed, the better chance of stopping scams.

Beware of Any Requests for Payment

Never comply with payment requests in unsolicited texts or emails, even small shipping or redelivery fees. No official UPS message will ask for payment information to be entered on third-party sites. These financial requests are always a scam tactic.

Change any Exposed Passwords

If you entered your UPS account login credentials or any shared account passwords into a fake site, immediately change them. Assume your passwords are compromised and reset them all to be safe, starting with financial accounts. Enable two-factor authentication as well wherever available.

Monitor Accounts for Suspicious Activity

Carefully monitor bank accounts, credit cards, and other records over the following weeks for signs of unauthorized access, just in case any information was stolen before realizing it was a scam. Report any fraudulent charges or activity immediately. Sign up for account alerts too.

Place Fraud Alert / Freeze Credit Reports

Contact one of the three main credit bureaus to place fraud alerts on your credit reports to help prevent scammers from opening accounts in your name using stolen info. Consider freezing credit reports entirely to block all access without approval.

Frequently Asked Questions About the UPS “Our Driver Can’t Find Your Address” Scam

What is the UPS “Our driver can’t find your address” scam?

This is a phishing scam where scammers send fake text messages or emails pretending to be from UPS. The messages claim that a UPS driver is unable to locate your address to deliver your package. You are prompted to click a link to provide your personal details like full name, address, phone number, and sometimes credit card information in order to “reschedule delivery.” However, the link goes to a fake UPS site that steals your information.

How does the UPS address scam work?

  1. You receive a text or email referencing a UPS tracking number you don’t recognize.
  2. The message claims the driver can’t find your address to deliver your package.
  3. You are instructed to click a link to provide your details to reschedule delivery.
  4. The link goes to a fake UPS site that steals your information when submitted.

What does the fake UPS phishing email/text look like?

The phishing messages mimic legitimate UPS alerts. They use the UPS branding and terminology like “tracking number,” “delivery issue,” etc. You may not even recognize it’s a scam attempt. Closely examine the sender, URL link, and other details to identify discrepancies.

What is the end goal of the UPS address scam?

The scammers aim to steal personal information and financial data by directing victims to a fraudulent UPS-branded website under the guise of a delivery problem. This information is then used for identity theft or sold on the dark web.

How can I recognize a fake UPS tracking email or text?

Warning signs include:

  • You aren’t expecting a package or don’t recognize the tracking number.
  • There are typos, grammatical errors, or awkward phrasing.
  • You are addressed generically instead of by name.
  • The sender email or domain seems suspicious.
  • Links go to odd URLs rather than UPS.com subpages.
  • Payment or personal information is requested.

What should I do if I get a suspicious UPS delivery email/text?

If the message seems fishy, avoid clicking any links or providing information. Double check the sender details without clicking first. Search online to confirm if the number or email is really from UPS. Contact UPS customer service directly to ask about the message. Also report the phishing attempt.

What information do scammers want with the UPS address scam?

Scammers will phish for any personal details they can get, like your full name, physical address, phone number, and email address. This helps them commit identity theft. Some scam versions also ask for credit card info, which is used to make fraudulent purchases.

What should I do if I already clicked the link and entered my details?

Immediately change any compromised passwords. Monitor accounts closely for fraudulent activity. Place fraud alerts and consider credit freezes too. Report the incident to UPS, other relevant institutions impacted, and the FTC. This can help limit the damage from any stolen information.

How can I avoid falling for the UPS address phishing scam?

Stay vigilant about texts and emails from delivery companies. Don’t click suspicious links demanding personal details. Verify senders and links before responding. Avoid entering info on sites you were sent to unexpectedly. Know the warning signs of phishing attempts seeking your private data.

The Bottom Line

The UPS “our driver can’t find your address” scam is a prime example of modern phishing threats, but awareness and vigilance can thwart the scammers. Recognizing the scam signs – unsolicited texts/emails, fake tracking numbers, urgent pleas for personal details – allows recipients to identify and avoid fraudulent messages impersonating trusted brands like UPS. Reporting these scam attempts and implementing other precautionary measures will frustrate cybercriminals’ efforts and help protect the public from phishing threats meant to steal their personal data and money. Don’t let scammers hijack your packages or your identity – protect yourself by staying informed of the latest phishing techniques and communicating any suspicious contact attempts.

How to Stay Safe Online

Here are 10 basic security tips to help you avoid malware and protect your device:

  1. Use a good antivirus and keep it up-to-date.

    Shield Guide

    It's essential to use a good quality antivirus and keep it up-to-date to stay ahead of the latest cyber threats. We are huge fans of Malwarebytes Premium and use it on all of our devices, including Windows and Mac computers as well as our mobile devices. Malwarebytes sits beside your traditional antivirus, filling in any gaps in its defenses, and providing extra protection against sneakier security threats.

  2. Keep software and operating systems up-to-date.

    updates-guide

    Keep your operating system and apps up to date. Whenever an update is released for your device, download and install it right away. These updates often include security fixes, vulnerability patches, and other necessary maintenance.

  3. Be careful when installing programs and apps.

    install guide

    Pay close attention to installation screens and license agreements when installing software. Custom or advanced installation options will often disclose any third-party software that is also being installed. Take great care in every stage of the process and make sure you know what it is you're agreeing to before you click "Next."

  4. Install an ad blocker.

    Ad Blocker

    Use a browser-based content blocker, like AdGuard. Content blockers help stop malicious ads, Trojans, phishing, and other undesirable content that an antivirus product alone may not stop.

  5. Be careful what you download.

    Trojan Horse

    A top goal of cybercriminals is to trick you into downloading malware—programs or apps that carry malware or try to steal information. This malware can be disguised as an app: anything from a popular game to something that checks traffic or the weather.

  6. Be alert for people trying to trick you.

    warning sign

    Whether it's your email, phone, messenger, or other applications, always be alert and on guard for someone trying to trick you into clicking on links or replying to messages. Remember that it's easy to spoof phone numbers, so a familiar name or number doesn't make messages more trustworthy.

  7. Back up your data.

    backup sign

    Back up your data frequently and check that your backup data can be restored. You can do this manually on an external HDD/USB stick, or automatically using backup software. This is also the best way to counter ransomware. Never connect the backup drive to a computer if you suspect that the computer is infected with malware.

  8. Choose strong passwords.

    lock sign

    Use strong and unique passwords for each of your accounts. Avoid using personal information or easily guessable words in your passwords. Enable two-factor authentication (2FA) on your accounts whenever possible.

  9. Be careful where you click.

    cursor sign

    Be cautious when clicking on links or downloading attachments from unknown sources. These could potentially contain malware or phishing scams.

  10. Don't use pirated software.

    Shady Guide

    Avoid using Peer-to-Peer (P2P) file-sharing programs, keygens, cracks, and other pirated software that can often compromise your data, privacy, or both.

To avoid potential dangers on the internet, it's important to follow these 10 basic safety rules. By doing so, you can protect yourself from many of the unpleasant surprises that can arise when using the web.