Fall shopping season is when fake delivery alerts spike. You get a text or email that looks like UPS, USPS, FedEx, Amazon, or a store you actually use. It says your package is held, delayed, or needs a fee. One tap later, you’re on a lookalike site that asks for a card, a login, or a “tracking app” download.
This post is for homeowners and people who work from the same PC they use for shopping and schoolwork. It is not a managed security service pitch. EDR for Home sells SentinelOne Control and Complete licenses for home and home-office devices. You run the agent on your PC, set to Protect so it defends automatically, with alerts you can customize.
Why package scams work so well at home
Delivery messages feel urgent and normal. You order things. Carriers really do send tracking updates. Scammers copy the logo, the tone, and the “something’s wrong with your shipment” story.
On a home PC the damage is personal:
- Saved browser passwords for banks, email, and shopping accounts
- Tax and insurance PDFs in Downloads
- Work files on the same machine you use for Amazon
- Kids’ game accounts and school logins
A fake tracking page does not need ransomware to hurt you. A stolen password or a silent stealer is enough.
How to spot a fake delivery message
Treat every unexpected package alert as untrusted until you check it yourself.
Check the sender, not the logo. Logos are easy to fake. Open the real carrier or retailer site yourself, or use the app you already installed from a trusted store. Do not trust a link inside the text or email.
Look for pressure. “Pay a small fee now or your package is returned.” “Confirm your address in 24 hours.” Real carriers rarely demand a card through a random link for a routine delivery.
Watch the URL. A real tracking page sits on the carrier or retailer domain. Lookalikes add extra words, misspell the brand, or use a long redirect chain. Hover (on a computer) or long-press (on a phone) before you tap.
Never install a “tracker” from a text. Real tracking does not need a new .exe, .dmg, or “security update” from a message. If a site pushes a download to “view your package,” stop.
If you already clicked, disconnect from the sketchy page, change passwords from a different device you trust, and check your bank and email for new logins. If you installed something, uninstall it and scan the PC.
What endpoint software does when a download is bad
Clicking is human. The useful layer is what happens after a bad file lands.
SentinelOne on a home PC is set to Protect by default. In that mode, the agent defends automatically when it detects malicious behavior, and you can customize alerts so you know what happened. That is software on your device, not a person watching a console for you around the clock.
If ransomware encrypts files on Windows, Control and Complete include 1-click rollback using Windows Volume Shadow Copy Service (VSS). Rollback is Windows-only. It is not available on Mac or Linux.
Control covers AI-powered protection, firewall and USB controls, and kill, quarantine, and remediation tools in your console. Complete adds deeper investigation tools in the same console you operate yourself. Buying either plan does not mean EDR for Home monitors your devices or runs a SOC for you. Details are on our Scope of Work.
A short habit that cuts most of this risk
- Ignore package links in texts and emails.
- Open the carrier or store site yourself and look up the order.
- Keep the SentinelOne agent installed and set to Protect on every home and home-office PC you care about.
- Turn on customizable alerts so you see blocks and detections without needing someone else to watch the console.
Current plans and prices are on membership.
Bottom line
Fake “your package is waiting” messages are built for busy households in shopping season. Do not pay fees through a link in a text. Do not install a tracker from a stranger’s message. Open the real site yourself, and keep endpoint protection on the PCs that hold your passwords and files.
Cybersecurity Awareness Month is a good reminder. Package scams do not wait for October to end.
Discover more from EDR for Home
Subscribe to get the latest posts sent to your email.
