What is it?
Fake package-tracking text messages and emails to completely compromise your mobile device.
How is it different?
Unlike older scams that just try to steal a credit card number, this malware gives hackers ongoing, silent control of your phone.
How does this scam work?
- The Hook: You receive a text message or email that looks exactly like a legitimate notification from USPS, FedEx, UPS, or Amazon claiming your "package is delayed," a "delivery address needs fixing," or a "customs fee is due."
- The AI Manipulation: Hackers use artificial intelligence to manipulate the underlying URL. It bypasses your phone's built-in security systems and appears legitimate.
- The Invisible Takeover: The moment you click the link, malicious spyware installs in the background. There is no flashing warning or obvious download indicator.
- The Hit: Once inside, the spyware acts as a keylogger, recording every keystroke, monitoring your banking apps, watching your text messages, and tracking your passwords. Their goal is a sustained, long-term financial drain.
The Red Flags
- Unsolicited tracking links: True postal and delivery services will never text or email you a tracking link unless you specifically went to their website first, logged in, and requested text updates for a specific tracking number.
- Urgent action requested: Messages that threaten to return the package to sender immediately if you do not click right away.
- Requests for digital signatures or permissions: If a site asks you to approve a "document review" or grant permission to your device settings just to look at a package route, it is a trap.
How Can I Protect Myself?
- Never click the link: If you are expecting a package, navigate directly to the carrier's official website (like USPS.com or FedEx.com) and type the tracking number into their search bar manually.
- Block and delete: Do not reply to the text (even replying "STOP" tells scammers your number is active). Block the sender and delete the thread immediately.