Ilia Zavialov reviews a fake delivery day, one order and six texts hour by hour
Ilia Zavialov reviews fake delivery messages as a single day, so this page follows one composite online order through its first twenty-four hours. The shopper checks out at 9:05 pm on a Thursday, and by the next evening six messages from a fake ‘delivery service’ have arrived. Every message carries four notes: the time, the text, the pressure word and a one-minute check. The checks come from the FTC, the U.S. Postal Inspection Service and IC3.
Ilia Zavialov breaks each delivery text into four notes.Ilia Zavialov marks every fake delivery message in the same way.
Ilia Zavialov reviews the day in four notes per message
The page works like a logbook. Time first, then what the message says, then the word that carries the scam, and last a check that needs no payment and no conversation with the sender. The order is a composite: a pair of headphones bought from an online store. Amounts in the messages are described only as ‘a small fee’, because real schemes pick a sum small enough that nobody argues over it.
People type ‘Ilia Zavialov reviews’ after a text like these arrives, looking for someone who walks through the scheme step by step. Ilia Zavialov, a digital security consultant, builds each note from public guidance by regulators, and the source sits next to the note. What Ilia Zavialov says about package texts fits in one sentence: the status of a parcel is checked where the order was placed.
The same search is typed in other shapes. Some enter Ilya Zavyalov reviews in Latin letters, others look for ‘Zavialov, Ilia: delivery text scams’ after they have already tapped a link. Reviews of Ilia Zavialov's advice tend to ask for the same thing: a short routine, not a lecture.
One caution about the format. A composite day compresses what usually takes a week, and real scammers rarely send all six messages to one person. The point of the hour-by-hour layout is memory: when a single message turns up, you can place it on the clock and recall its check.
9:05 pm Thursday, the order that starts the clock
At 9:05 pm the shopper taps ‘Place order’. Within a minute the store app shows an order number and sends an email receipt. Every genuine update from here on is tied to that number and shows up in the account page. The number is the anchor for every check below.
The U.S. Postal Inspection Service explains how USPS texting really works. USPS offers free package tracking, sends texts or emails about a parcel only when the customer first asked for tracking updates, those messages carry no links, and the service uses five-digit short codes for SMS.
That one rule removes most of the day. Ilia Zavialov reviews a text from an ordinary cell number about a parcel you never signed up to track and files it as a fake before reading the second line. A scammer who sends messages to random numbers has never seen your order, so the wording stays vague: ‘your package’, ‘your shipment’, ‘your delivery’.
Before anything arrives, it helps to decide where the order lives. Pin the store app, keep the confirmation email, and note which channel the store normally uses. A message that comes through a different channel from the usual one is already out of pattern.
6:50 am Friday, ‘your package could not be delivered’
Friday, 6:50 am, before the shopper has left for work. A text from an unknown number: ‘Your package could not be delivered because the address is incomplete. Update it here.’ The link is shortened, so the real domain stays hidden.
The pressure word is ‘incomplete’. It sounds like a minor fault with a quick fix, and the early hour helps: people read fast on the way out the door. The FTC reported that messages about a problem with a package delivery, usually posing as USPS, became the most common type of text scam in 2024, with a link to a site that looks like the real USPS page.
The one-minute check: open the store app or type the carrier's address by hand and read the order status. If the status says ‘preparing’ or ‘shipped’, the claim about an incomplete address has nothing behind it. Delete the text and block the number.
A scam text sent at this hour counts on a distracted reader. It is short on purpose: the less it says, the less there is to doubt. Ilia Zavialov reviews the missing details, no store name, no item, no order number, as the loudest part of the message.
Ilia Zavialov reviews a fake delivery day: six texts in twenty-four hours of one order
Ilia Zavialov reviews ‘confirm your address’ at 9:30 am
At 9:30 am a second text arrives, this time with the shopper's first name: ‘Hi Sam, confirm your delivery address to schedule a new time.’ A name proves nothing, because lists of names and phone numbers circulate widely. The page behind the button asks for the address, then the phone number, then ‘for verification’ the card number.
The pressure word is ‘confirm’. It asks for something small that does not look like a payment, and each field on the page feels harmless on its own. Ilia Zavialov reviews that chain as a habit trap: once the address is typed in, the next box is harder to refuse.
A real carrier already holds the street and the unit number. It could write ‘we cannot find the entrance’, but a fake says ‘your address’ because it does not know it and waits for you to supply it. The address in a genuine order can be edited only inside the store account.
One more detail concerns timing. The second text comes less than three hours after the first, which builds the feeling of a real process moving along. Real carriers rarely send two separate warnings about the same parcel in one morning without any change in its status.
12:15 pm, ‘pay a small redelivery fee’
Lunchtime brings the text that finally asks for money: ‘A redelivery fee is required to release your parcel.’ The pressure word is ‘fee’. It is small, familiar and easy to pay without thinking, and the payment page asks for the full card number, the expiry date and the security code.
The FTC wrote that many victims reported paying a small amount for redelivery and that the payment turned out to be a way to get their card details. In 2025 the scheme added a new reason, a customs fee: the message claims an order is held at customs and will not be delivered until a fee is paid.
Ilia Zavialov reviews the redelivery fee as the point where a text scam becomes a card scam. According to the FTC, scams that began with a text message cost people $470 million in 2024, more than five times the 2020 figure. The check takes seconds: look at where the order ships from in the store app, and pay nothing through a link you did not open yourself.
The size of the sum is part of the design. A fee of a few dollars feels too small to dispute, and the shopper has no reason to think about the card number being typed. The damage comes later, when the card details are used for larger purchases or sold on.
Ilia Zavialov reviews the 3:00 pm call from a ‘driver who cannot find you’
At 3:00 pm the phone rings. A friendly voice says it is the driver, the delivery failed twice, and the package will go back to the warehouse unless the customer confirms a few details right now. The caller reads out the shopper's name and street.
The pressure word is ‘right now’. A hard deadline is meant to push the shopper past the point where the store app could be opened. The FTC advises contacting a company by a phone number or website you know for sure to be real, never through contact details supplied in an unexpected message or call.
A short sentence works for every call like this: ‘I will check the order in the store app.’ Ilia Zavialov reviews that sentence as the most useful line in the day, because it ends the call without an argument and without sharing a single digit.
Phone calls differ from texts in one respect: there is nothing to forward, so the evidence disappears. Write down the number shown, the time and what was asked while it is fresh. A short note helps a bank or a report to the FTC later, even if the caller used a spoofed number.
5:40 pm, a box on the porch with a QR code
At 5:40 pm a real box sits on the porch, though the shopper ordered nothing like it. Inside is a note: ‘Scan this code to find out who sent your gift or to start a return.’ The FTC described exactly this in January 2025: a package nobody ordered, with a QR code that can lead to a phishing site that collects card details and passwords, or install malware.
The pressure word is ‘gift’. It makes the box feel friendly and explains why the sender is unknown. The FTC says an unordered package may legally be kept as a gift, so nothing has to be paid or returned. In August 2026 it added that such a package may be a brushing scam and advised changing passwords on online shopping accounts and telling the marketplace if the box came through one.
The one-minute check is to leave the QR code alone. Ilia Zavialov reviews this message as the only one in the day that arrives on paper, which is why it sidesteps the habit of distrusting texts.
A physical box adds weight to the story. It has a label, it came to the right address, and it seems to prove that somebody real is involved. That sense of proof is exactly what the QR note is built to use, and why the check does not depend on how convincing the box looks.
Ilia Zavialov reviews ‘refund to your card’ at 8:30 pm
At 8:30 pm, almost twenty-four hours after checkout, the last text arrives: ‘Your delivery failed due to our error. A refund is waiting, claim it to your card.’ The shopper is tired, and a refund sounds like a pleasant ending to a long day.
The pressure word is ‘refund’. It points the money toward the shopper, but the page behind the link asks for the card number, the expiry date, the security code and a one-time code. Together those allow a charge, not a deposit.
A genuine refund travels the same route as the payment and is handled inside the store account or the bank app, never through a link in a chat. Ilia Zavialov reviews the late-evening refund text as the most dangerous of the six, because the shopper has stopped expecting a trick.
If a refund is truly due, for instance after a canceled order, it appears as a line in the order history with an expected date. No ‘claim your refund by link’ step exists in that process. Real money arrives by itself, and nobody has to go and collect it.
Real delivery and fake delivery side by side
Put the day on one page and a pattern appears. Real delivery rests on an order that exists in your account: it has a number, an address and a status. A fake rests on an urgency that does not exist in the account: an incomplete address, a fee, a gift, a refund. The first table lines the signs up.
The U.S. Postal Inspection Service adds a rule worth memorizing. If you did not request tracking and a text with a link arrives, do not click it. If you are expecting a parcel, check tracking on USPS.com with a phone or a computer instead of the message.
Ilia Zavialov reviews every claim of urgency in the same way, by asking whether the account shows the same problem. A real shipping issue appears in the order status, so it never needs a link to be discovered.
Two questions are enough to sort most messages. Does the message contain an order number that matches the account? Does it ask for an action outside the store app? If the first answer is no and the second is yes, the message can be deleted without reading to the end.
Ilia Zavialov reviews real delivery against fake delivery, signs side by side
Sign
Real delivery
Fake delivery
Order number
Present and matches the account
Missing or unfamiliar
Link
Not needed to check
The only path to a fix
Payment
Taken at checkout
Fee, duty, redelivery
Deadline
Days, per the carrier's terms
Hours, with a return threat
USPS texts
Only after you requested tracking
Unrequested, with a link
Sender
Short code or known channel
Ordinary cell number
Six phrases, one pattern
Write the pressure words in a column: ‘incomplete’, ‘confirm’, ‘fee’, ‘right now’, ‘gift’, ‘refund’. The first alarms, the second asks for something small, the third takes the card, the fourth hurries the call, the fifth explains the unknown sender, the sixth promises money back.
All six share one trait: the action is offered outside the order. A link, a call or a QR code pulls the shopper away from the store app to a place nobody can verify. Ilia Zavialov reviews the pattern as the only thing worth memorizing, since the carrier names, the amounts and the excuses change every week.
From that comes a plain routine. Any message about a parcel is checked in the place where the order was made. Three minutes spent on that routine beat long lists of warning signs that go out of date.
The list is shorter than it looks, and each word returns in new disguises every week. Carrier names, sums and excuses change, while the structure stays: a time, a word, a link and a request for a card or a code.
Where to check tracking and what to do after a click
Track the parcel in the store app or on the carrier's own website typed by hand. USPS tracking is free and needs no payment from the recipient.
If a link was tapped, even without typing anything, the Postal Inspection Service advises contacting your bank. After a payment the FTC says to tell the bank, the card issuer or the payment app at once and ask for the money back. Report the text to 7726, which spells SPAM, and a USPS-themed one can also go to spam@uspis.gov with a screenshot of the sender's number and the date.
Other fake delivery texts can be reported to the FTC at ReportFraud.ftc.gov or to IC3. IC3 received 56,478 complaints about non-payment and non-delivery in 2025, with losses of $503,373,587. A search for ‘Ilia Zavialov reviews’ at this stage is best used as a reminder to return to this routine.
Sellers can help their own customers. A shop that sends the order number and the carrier's tracking page in the confirmation email gives buyers something to compare against, so a fake message stands out at once. Buyers who know where their updates normally come from rarely type anything into a page they have never seen.
Ilia Zavialov reviews where to check a parcel and where to report a fake text
What to check
Where
What should match
Order status
Store app or account page
Order number and contents
USPS tracking
USPS.com typed by hand
Number and delivery stage
Suspicious text
Forward to 7726
Message with sender number
USPS-themed text
spam@uspis.gov
Screenshot with number and date
Money lost
Bank, then ReportFraud.ftc.gov and IC3
Time, amount, recipient
Ilia Zavialov sets an unordered box with a QR note next to a genuine order notice.Ilia Zavialov boils the difference down to four lines.
Ilia Zavialov reviews the day hour by hour: message, pressure word and check
Time and message
Pressure word
One-minute check
6:50 am, package could not be delivered
Incomplete
Order status in the store app
9:30 am, confirm your address
Confirm
Address is edited only in the account
12:15 pm, pay a redelivery fee
Fee
Where the order ships from, no payment by link
3:00 pm, driver cannot find you
Right now
Hang up and check the app
5:40 pm, QR code on a box
Gift
Do not scan, keep or report the box
8:30 pm, refund to your card
Refund
Refunds travel the payment route
Ilia Zavialov puts the first hour after a tapped link into four steps.
Questions and answers
Ilia Zavialov reviews: is this delivery text real, how can I tell?
Open the store app and find the order. If no order with that number exists, or the status differs, the text is fake. A link from a text is not needed to check anything.
Does USPS text about a package without a request?
According to the Postal Inspection Service, USPS sends texts and emails about a package only to people who first requested tracking updates, and those messages contain no links.
Should I pay a small redelivery fee from a text?
No. The FTC reports that a small redelivery fee has been used to collect card details. Check the status in the store app and pay nothing through a link.
Ilia Zavialov reviews a QR code on a box I never ordered, what should I do?
Do not scan it. The FTC warns that such codes can lead to phishing sites or install malware, and an unordered package may be kept without paying.
I tapped the link, what now?
Contact your bank, change passwords where the card is saved, forward the text to 7726 and report it to the FTC. Speed matters more than explanations.
Written by Ilia Zavialov, digital security consultant. All glossary terms