Holiday Scam Survival Kit (2025): Delivery Texts, ‘Family Emergency’ Calls, Gift Card Traps
Holiday scammers are running peak-season ops 📦🎄 “Delivery problem” texts, AI “family emergency” calls, and “pay via gift card/Zelle” pressure. Rule: don’t click, hang up + call back, never gift cards/crypto/wires.
TL;DR
- Never click delivery links in texts; check orders only in retailer or carrier apps/sites you type.
- “Relative in trouble?” Hang up and call back using a saved number; use a family codeword.
- No bank or government agency will ask for gift cards, crypto, or a wire transfer. Stop and verify.
- Keep marketplace chats and payments in‑app; walk away if pushed to Zelle or gift cards.
- Give wisely: verify charities; pay by credit card only.
AlphaHunt
Stop doomscrolling, start decisioning. We chewed through the muck so your team doesn’t have to. → Subscribe!
Like this? Forward this to a friend!
(Have feedback? Did something resonate with you? Did something annoy you? Just hit reply! :))
One‑Glance Channel Guide
-
Texts (SMS/iMessage)
- Red flags:
- “Delivery fee/reschedule” links, short links/QRs, urgent refunds/prizes.
- Do instead:
- Ignore links; open retailer app or type carrier site (usps.com, ups.com, fedex.com).
- Report:
- Forward to 7726 (SPAM); screenshot and report at ReportFraud.ftc.gov; report USPS smishing to USPIS.
- Red flags:
-
Emails
- Red flags:
- Lookalike sender domains, attachments, payment/update requests.
- Do instead:
- Type the official site; verify orders in your account; use carrier/retailer apps.
- Report:
- ReportFraud.ftc.gov; bank/card via number on back; carrier abuse pages.
- Red flags:
-
Phone calls/voicemails
- Red flags:
- Urgency, secrecy, caller ID spoofing, requests for codes/money.
- Do instead:
- Hang up; call back on a saved contact; use a family codeword.
- Report:
- ReportFraud.ftc.gov; bank/card via number on card; SSA OIG for SSA scams.
- Red flags:
-
Marketplaces (FB Marketplace, OfferUp, Craigslist)
- Red flags:
- “Switch to SMS/WhatsApp,” off‑platform pay (Zelle/gift cards/crypto), too‑good‑to‑be‑true prices.
- Do instead:
- Keep messaging and payments in‑app; meet at police safe zones; pay by credit card when possible.
- Report:
- In‑app reporting; bank/card via number on back; IC3.gov for purchase/rental fraud.
- Red flags:
The Big 5 Holiday Scams (Plain Language + What To Do)
-
Package delivery texts (fake USPS/UPS/FedEx)
- Looks like: “Your package needs a fee. Click to reschedule.”
- Do: Ignore links. Track in retailer app or type carrier site yourself.
-
“Help me!” calls with AI voices (grandkid/relative imposters)
- Looks like: “I’m in trouble. Don’t tell anyone. Send money now.”
- Do: Hang up. Call the person back using your saved contact. Use a family codeword.
-
Government/bank imposters
- Looks like: “Your account is frozen. Move money to keep it safe.”
- Do: Don’t move money. Call the number on your card or the official site you type.
-
Marketplace “pay off‑platform” tricks
- Looks like: “Switch to text/WhatsApp. Pay with Zelle or gift cards.”
- Do: Stay in the app. Use built‑in payments. If pushed off‑platform, walk away.
-
Charity and vacation rental fakes
- Looks like: End‑of‑year urgency, lookalike charity names, rentals “too good to be true.”
- Do: Verify charities (IRS Tax‑Exempt Search/Charity Navigator). Pay by credit card. For rentals, view in person or use trusted platforms.
Easy Checklists
DO
- Type websites yourself or use official apps.
- Call back on saved numbers; agree on a family codeword.
- Use credit cards (best refunds) for donations and online purchases.
- Keep marketplace messages and payments in‑app.
Don't
- Don’t click links in unexpected texts/emails.
- Don’t pay with gift cards, crypto, or wires for “fees” or “protection.”
- Don’t stay on a call if you feel rushed—hang up and verify.
Family Codeword Plan (5 minutes tonight)
- Pick a codeword everyone remembers but never posts online.
- Use it anytime someone asks for money or urgent help.
- If the caller doesn’t know it, hang up and call back a saved number.
AlphaHunt Converge - Plug in your Flight Crew
Get intelligence where it counts. No dashboards. No detours. AlphaHunt Converge teases out your intent, reviews the results and delivers actionable intel right inside Slack. We turn noise into signal and analysts into force multipliers.
Anticipate, Don’t Chase.
Suggested Pivots
Which delivery smishing phrases are trending this month, and how do they differ by carrier lookalike?
- Why: Tailors examples to real lures your family sees now.
- What to expect: Up‑to‑date wording, short‑link patterns, and domain styles.
What simple classroom activities best teach kids the “Stop–Check–Confirm” habit?
- Why: Turns guidance into muscle memory.
- What to expect: 10‑minute role‑plays, poster prompts, callback drills.
Which marketplaces show the highest off‑platform payment abuse this season, and what in‑app controls help most?
- Why: Focuses prevention where risk concentrates.
- What to expect: Platform‑specific settings and safe‑payment defaults.
Appendix
References
- (2025-03-26) USPS/USPIS: “USPS never sends unsolicited text messages” | Smishing emphasis
- (2025-01-31) USPS & USPIS highlight smishing upticks (local release)
- (2024-11-21) UPS: Protect yourself from fraud and scams
- (2025-09-23) FedEx: Recognize and report fraud
- (2024-04-10) FBI IC3 2023 Internet Crime Report (purchase/rental fraud trends)
- (2025-05-20) Rental Scams Explained
- (2025-12-11) Family Emergency Scams | FTC Consumer Advice
- (2025-12-11) Avoiding and Reporting Gift Card Scams | FTC Consumer Advice
AlphaHunt
Stop doomscrolling, start decisioning. We chewed through the muck so your team doesn’t have to. → Subscribe!
Forward this to a friend!
(Have feedback? Did something resonate with you? Did something annoy you? Just hit reply! :))
(c) 2025 CSIRT Gadgets, LLC
