The latest delivery scam has 'carriers' calling to return your phone - don't fall for it

Source: ZDNet

Key takeaways

• A phone call telling you to return a new phone may be a scam.
• The scammer simply keeps your phone instead of replacing it.
• Hang up on such calls and contact the carrier directly.

The next time you receive a new mobile phone through the mail, be wary if someone calls claiming that you were sent the wrong device and that you need to return it. That could be a scammer looking to get their hands on your expensive new gadget.

This scam hit close to home when one of our editors received a new phone from Spectrum by mail. Hours later, a caller—who knew her name, address, and the exact phone model—claimed to be from Spectrum and said a mix‑up had occurred. The “representative” insisted she would call back, which raised the editor’s suspicion.

After contacting Spectrum, the editor learned this is a common swindle. The scammer tells the victim to ship the phone, promising a replacement, but keeps the device for resale or identity fraud. In the following days, the editor received dozens of spam calls, likely linked to the attempted scam. When she asked the Spectrum agent how the scammer knew her details, the agent avoided answering.

Also:

• Beware the ‘Hi, how are you?’ text. It’s a scam – here’s how it works
• I’m a tech pro and an AI job scam almost fooled me – here’s what gave it away

A similar experience was shared in a Reddit post. An Xfinity customer received a new phone via FedEx, then got a call from someone claiming to be an Xfinity agent. The caller said the phone was the wrong model and asked the customer to return it using a QR code. When the customer asked for the account number, the caller could not provide it, prompting the customer to hang up and verify with the real Xfinity—confirming it was a scam.

What’s the story behind this kind of crime?

“This is a classic social engineering scam that’s been adapted for mobile device purchases,” said Kern Smith, senior VP of Global Solutions Engineering at mobile security provider Zimperium. “Attackers impersonate a carrier, claim there’s an issue with a newly delivered phone, and try to convince the customer to return it using a QR code or alternate shipping instructions. It’s designed to exploit trust and urgency at the exact moment someone receives a new device.”

Also: This IRS text message scam keeps fooling people – 3 ways security experts avoid it

The tactic isn’t new, but the timing and detail have evolved. Attackers contact victims almost immediately after delivery, citing the specific model or carrier to make the scam more believable. Information can come from data breaches, compromised email accounts, exposed shipping data, or malware that monitors notifications. Leaked order confirmations or tracking details are often enough to craft a convincing story.

How to protect yourself

“Consumers should never act on an unsolicited call about a delivery issue,” Smith cautioned. “If someone claims there’s a problem, hang up and contact the carrier directly using the official number or app. Be especially cautious of QR codes sent by text or email, as they can redirect to fraudulent sites.”

Also: The iPhone’s new call screening feature makes updating to iOS 26 totally worth it for me