Fake shipping and invoice scams that drain cards and bank accounts

Two lookalike frauds hit consumers and small freelancers hard: fake shipping notices (USPS/UPS/FedEx-branded texts and emails) and fake invoices (spoofed bills from a “vendor,” “landlord portal,” or “utility”). Both push you to click a payment link, share card data, or send Zelle/wire “to release a package” or “avoid service shutoff.”

Cluster with other cash-drain patterns in Credit and debt scams and Phishing and account takeover.

Common scripts

Real USPS, UPS, and FedEx do not cold-text random postage fees with a sketchy shortener. Real IRS and benefits agencies do not invoice you by gift card either—see Fake IRS and benefit scams.

Worked example: the $287 “past-due” PDF

Casey freelances and gets an email “from” a client’s bookkeeper: PDF invoice for $287, “Net 0 — pay by Stripe,” logo almost perfect. Casey almost pays because a real project wrapped last month.

Verification that saved the money:

1. Casey opened the last known good thread with the client—not the new PDF’s reply-all.
2. Client said no invoice was sent; the bookkeeper’s real domain differed by one letter (co vs com lookalike).
3. Casey forwarded the message to the client’s known address and deleted the pay link unread.
4. Casey checked the business card for a surprise authorization; none. Had a charge appeared, next stop would be Disputing a credit card charge.

Fake “pay a tiny label fee” texts and QR postage pages have their own pattern set: Fake shipping labels and QR scams.

Shipping-text hygiene

• Track packages only inside the retailer or carrier app you already use (Amazon, UPS My Choice, FedEx Delivery Manager, USPS Informed Delivery).
• Never enter a card to “release” a package from a text link.
• If a porch pirate or real customs bill is possible, use the phone number on the carrier’s official site.
• Treat unexpected “refund” shipping links like any other phishing lure.

Invoice hygiene for households and side hustles

1. Pay known vendors from saved payees in your bank/bill-pay, not from email buttons.
2. Confirm bank-detail changes out-of-band (phone number from a prior statement).
3. Match invoice numbers and amounts to contracts or purchase orders you remember.
4. Refuse gift cards, crypto, or wire for routine utilities and software seats (Gift cards and prepaid risks).
5. For small businesses, enable MFA on QuickBooks/Xero/Stripe and restrict who can change payout accounts.

If you already clicked or paid

1. Stop further payments; call your card issuer or bank from the number on the card.
2. Change passwords on email and financial accounts; check forwarding rules.
3. Freeze credit if you typed SSN or full application data (Credit freezes and fraud alerts).
4. Report to ReportFraud.ftc.gov and, for carrier brand abuse, the real carrier’s fraud channels.
5. Warn whoever shared your email on the project thread—spoofing often fans out.

Checklist

1. No card or Zelle from a shipping SMS—open the official app instead.
2. Verify every unexpected invoice with a known phone number or prior email thread.
3. Hover/check domains; lookalike bookkeeper addresses are a tell.
4. Save official payees; treat “new wiring instructions” as high risk.
5. Keep card dispute deadlines in mind if a fake checkout charged you.
6. Teach one household member the package-text rule this week.

Fake USPS Informed Delivery “package held” phishing and redelivery-fee lures: Fake USPS Informed Delivery scams.

Educational only. Not legal or fraud-recovery advice. Scam tactics change. Verify contacts through official apps and statements and report fraud to the FTC and your financial institution.