Order-Tracking Page Credential Phish
A 'track your order' link opens a fake retailer or carrier login that harvests your account credentials.
Think a message like this reached you? You can check it right now.
What this scam is
You get a shipping or order-tracking notice with a 'track your package' or 'view order' button. The link leads to a convincing but fake retailer or carrier login page that captures your username and password. Because tracking a package feels routine and safe, people log in without checking the address. Genuine tracking works through the retailer's app or the carrier's real site.
What it usually looks like
- A 'track your order/package' link in an email or text.
- A login page that mimics the retailer or carrier.
- A slightly-off web address.
- A request to sign in just to see tracking.
Common warning signs
- You must log in to view basic tracking.
- The web address is not the real retailer or carrier.
- The message is vague about what you ordered.
- Generic greeting.
Example wording scammers use
“Your package is on the way! Sign in to track your delivery: order-tracking-portal.net”
“Tracking update available — log in to view your shipment status.”
These are illustrative examples written by ScamSplain, not real messages.
What the scammers want
- Your retailer or carrier login.
- Reusable credentials for other accounts.
- Access to your order history and saved payment.
What to do
- Track orders inside the retailer's app or on the carrier's official site.
- Do not log in from an emailed tracking link.
- Enable two-factor authentication.
- Delete and report.
What to do if you already responded
- Change the password and revoke sessions.
- Watch the account for changes to saved payment/addresses.
- Report at reportfraud.ftc.gov.