Protect Yourself From Fraud and Scams
Received a text, call or email that seems suspicious? Don’t respond to it.
Best Practices to Avoid Fraud and Scams
UPS Account holders can follow these tips to help protect themselves from potential fraud.
Review your invoices for suspicious shipments and activity.
Review ups.com security settings:
- Choose a strong, unique password that is only used for your UPS account
- Each user ID should have a unique email address
- Review your authorized user lists and remove ex-employees and anyone who no longer needs access
Manage your account to limit third-party/freight-collect charges:
- Set your account to deny all inbound charges and then designate those permitted to charge your account through your exceptions list
Create your UPS My Choice® or UPS My Choice for Business® account and manage settings for best visibility and administrative overview of your account.
How to Recognise Fraud
- Slow Down - Scammers rely on urgency to create panic. Be cautious of anything that implies you must act immediately. Take the time to review the message, then review it again.
- Don’t Click — Check the Link - Legitimate UPS links will start with “https://www.ups.com”, “https://billing.ups.com”, "https://go.ups.com" or "http:/links4.upsemail.com".
- Check the Details - Are there spelling or grammar errors? Generic greetings, like “Sir or Madam?” Fraudsters will frequently use small typos to trick you into clicking on the link.
- Report It - Report it to the Federal Trade Commission.
- Delete and Block It - So you don’t accidentally interact with it later.
- If It Seems Too Good To Be True, It Probably Is - Scammers may sell fake labels at deep discounts.
Common Fraud Scenarios
Payment is Needed or Overdue Never wire money, send money orders, gift cards or cash. Use secure payment methods like the UPS Billing Centre.
Go to the UPS Billing Centre
Funds Required for Parcel Delivery Only a few parcels require money for delivery: Collect on delivery, duties or taxes. Tracking your parcel is the safest way to see if any fees are due.
Track Now
Account or Payment Info Requested Unexpected alerts about your account could be fraud. Confirm there are no suspicious shipping or invoicing activities by logging in to UPS.com.
Log In to Confirm
Types of Fraud
Fraudsters may target you on a variety of channels. Read some real-world examples.
Fraudulent emails adopt many different forms and are the unauthorized actions of third parties not associated with UPS. These email messages referred to as "phishing" or "spoofing" are becoming more common and may appear legitimate by incorporating company brands, colors, or other legal disclaimers. Help protect yourself by becoming familiar with these methods of fraud:
- Spam: Often referred to as ‘junk mail’, spam consists of email messages that are unsolicited by the recipient and that target the recipient with direct mail messages.
- Phishing: The term "phishing," as in fishing for confidential information, refers to a scam in which the sender attempts to fraudulently obtain and use personal or financial information.
\
Please be advised that UPS does not request payments, personal information, financial information, account numbers, IDs, passwords, or copies of invoices in an unsolicited manner through email, mail, phone, or fax or specifically in exchange for the transportation of goods or services. UPS accepts no responsibility for any costs or charges incurred as a result of fraudulent activity.
View Examples of Fraudulent Emails
Awareness and recognition of fraudulent letters, emails and phishing attempts is vital to protecting yourself against theft and other related crimes. Common indicators that an email might be fraudulent include the following:
- Design Flaws: An email containing distorted or irregularly sized logos
- Poor Grammar: Grammatical errors and excessive use of exclamation points
- Misspellings: Incorrectly spelled words or links to altered websites (For example, modifications or variations of the legitimate www.ups.com website address, such as www.unitedparcelservices.com)
- Sense of Urgency: Alarming messages requesting immediate action, such as "Your account will be suspended within 24 hours." or "Contact us immediately to claim your parcel or prize."
- Unexpected Requests: A request attempting to obtain money, financial information (e.g. bank account or payment card numbers), or personal information in exchange for the delivery of a parcel or other article
- Communication Gaps: An email that does not provide an alternative method for communicating the requested information (i.e. telephone, mail, or physical locations)
- Deceptive Link: A link contained within an email that appears to direct your browser to a known, safe site but actually directs your browser to another location, potentially to an unsafe or fraudulent site. You can detect this by hovering over the link with your cursor. This causes the actual destination of the link to display in a pop-up, the lower left of your status bar, or other location depending on your email client. It is suspicious if the actual destination does not match the address in the link. Also be suspicious of links containing numbers in place of letters, abbreviations, and slight misspellings in the link.
\
Some legitimate UPS communications may come in the form of an email with an ‘e-parcel’ link contained within the email. These messages are designed to increase the protection around sensitive information, and the associated link will always start with https://ftp2.ups.com.
Fraudulent emails often appear to come from trusted sources, with the true sender revealed only through the Internet headers (not the same as the email headers). The Internet headers can be found through your email system from within the email, using various methods depending upon the email system you use. For example, in Microsoft Outlook, this is accomplished by opening the email in a separate window, clicking on the ‘File’ tab and then choosing ‘Properties’. The internet headers will be shown in the box at the bottom of the window.
Additonal ways to prevent email fraud:
- Never respond to or act upon emails, or select web links from any unknown source that requires you to provide, update, or verify personal, financial, or other confidential information.
- Be wary of any suspicious emails or phone calls asking for you to validate your UPS account information.
- Use a secure Internet browser.
- Do not give out your UPS.com user name or password.
- Change your password regularly.
- Create strong passwords by using a combination of letters and numbers.
- Always use up-to-date virus protection software and consider using spyware detection programmes.
- Equip your computer with either a software or hardware firewall.
- Do not access confidential information at Internet cafes, public libraries, etc.
- If you are using a wireless device, be sure to follow the manufacturer's instructions on establishing the services and settings to ensure a protective level of security.
\
Additional information on spam or phishing can be found online at the Federal Trade Commission website.
In addition to fraudulent websites and emails, fraudsters also may use the telephone, text messages, a fax machine, letters, or other communication methods in an attempt to gather your personal information. These fraudulent communications are the unauthorised actions of third parties not associated with UPS. Fraudulent communications claiming to be from UPS may claim to indicate a parcel is waiting to be delivered. These communications will generally ask you for personal information and/or a payment in advance of receiving a parcel, or may indicate a need to update your account by obtaining personal information or a copy of your UPS invoice. The links in the text messages may contain malware or direct to a fraudulent website.
If UPS contacts you regarding a parcel, the UPS representative will always be able to provide a tracking number, which you can verify on our website. You also should know that UPS may contact you from time to time regarding service offerings or for marketing purposes, but you may always verify our phone number and call back before proceeding.
If you are ever unsure of the validity of a communication, ask for the caller's first and last name and a call-back telephone number.
If you are unsure of the validity of a text, do not click or select any links or open any attachments as they may contain a virus.
View Examples of Text Messages
View Examples of Fraudulent Faxes
In the past, successful fraudsters may have needed "an honest face." However, today's criminals only need a legitimate-looking website or email to commit fraud.
We regularly monitor the Internet for the unauthorised use of the UPS brand to protect our customers. The unauthorised or unlicensed use of UPS intellectual property (trademarks, copyrights, patents, and trade secrets) is monitored and acted upon, if known. Please note that some fraudulent websites may have the look and feel of a legitimate UPS website. To be assured you are accessing an authorized UPS website, use "ups.com" rather than a link embedded in another source.
One fraud type involves sending fraudulent checks or money orders, usually by UPS Next Day Air® service, either in response to an online advertisement or as part of a fraudulent job offer. Do not assume that the method of delivery lends any legitimacy to the contents of the parcel.
If you have received an unexpected check or money order, you should assume it is fraudulent. You should also be extremely cautious if you receive a check or money order for an amount greater than the expected amount. You may be contacted by email with a request to cash or deposit the money and return a portion of it using Western Union or other means. The fraudster will advise that you keep a portion of the money, which is less than generous considering the original check is probably fraudulent. Even the bank may initially believe the check or money order to be legitimate, only to discover the truth later and return it to you for repayment.
Most illegitimate "work from home" job scams can be avoided by watching out for unrealistic pay promises with no experience necessary, or jobs that require you to make a payment before divulging specifics. Some of these scams, however, are more difficult to identify as fraudulent, and may result in you being personally liable. Some identified examples include:
- Payroll (or Other Checks) Processor: The scam version of this job involves printing and sending "payroll" or other checks or money orders (usually by UPS Next Day ® Air or other overnight delivery). The fraudster may have provided or asked you to purchase check production software and will provide or ask you to obtain a UPS (or competitor) account number. The fraudster may also provide a bank account number to use when printing the checks, a digital signature, and a list of names, addresses, and amounts for payment. The fraudulent checks are then sent to people who advertised items for sale. They are asked to cash checks, often written for an amount greater than the asking price, and to return a portion of the money along with the purchased item. The checks are later returned by the bank as fraudulent.
- Mystery Shopping: Legitimate mystery shoppers shop in stores and provide feedback to the store (or a third party) regarding the experience. In the scam version of this job, "mystery shoppers" are asked to use funds sent to them via check or money order—later determined to be fraudulent. This sometimes involves wiring a portion of the money back to "mystery shop" a third party (e.g. Western Union).
- Returns Processing Position: The scam version of this job offers part-time work to receive and process incoming shipments from a company's clients. The companies often sell electronics, or baby accessories, or automotive parts. You are instructed to inspect the parcels and to follow instructions received from your ‘Returns Manager’, such as to repack and send the merchandise to another location. There may be no initial expense outlay, and all supplies are ordered and sent to you for this position. Communication is done primarily via- email.
Scammers are creating fake labels. Once created, they can either ship goods using those labels or resell them fraudulently.
When this happens, it is our policy to remove the shipment from our network and engage with law enforcement where appropriate.
If you believe this has happened to you, we recommend you contact your shipper immediately to see what they can do for you.
To help prevent this from happening again in the future, it is always best to ship directly with UPS using labels created on UPS.com with your own shipping account.
The old saying is true: If it seems too good to be true, it probably is.
Here are some tips to help protect against reference number tracking fraud:
- Be wary of any suspicious emails or phone calls asking for you to validate tracking numbers with reference numbers.
- Do not give out tracking numbers to unknown parties.
- Create unique reference numbers by using a combination of letters and numbers.
- Change reference numbers frequently.