Elyse Betters Picaro / ZDNETI’ve been anxiously expecting a package from UPS. That’s why a text I received the other day caught my eye. Claiming to be from UPS, the message said that the carrier attempted to deliver the package on June 27, but the delivery couldn’t be completed. The date was one in which my wife and I were away, so this seemed legitimate at first glance.Also: Got a suspicious E-ZPass text? Don’t click the link (and what to do if you already did)However, I’ve written plenty of cybersecurity stories, and I keep abreast of the latest news in the world of cybercrime. I know that UPS scam messages have been making the rounds, especially at this time of year. Naturally, my spider sense started tingling even before I read the text itself. But after reviewing the message and checking out all the details, I realized this was clearly a scam. Scammers like to schedule specific types of scams for certain times of the year. During tax season, you’ll see a lot of scams that spoof the IRS. During the holiday season, gift-card scams ramp up. And during the summer, missed-delivery scams are popular since the crooks know that people are often away on vacation. How the UPS scam worksThis particular UPS scam is a savvy one, at least in some ways. I received the message on my iPhone, with the sender labeled as unknown. By default, links in a text message from an unknown sender are disabled, so you can’t click on them to open them. But the scammer used a sneaky trick to get around this obstacle. Also: Clicked on a phishing link? 7 steps to take immediately to protect your accountsYou’re instructed to reply to the message by typing Y. Doing so then turns the scammer into a known sender. Open the message again, and now the link is clickable. If that doesn’t work, another option is to copy and paste the link into Safari, where it takes you directly to the malicious website. From there, the website prompts you to confirm your contact information if you want to get your package. That means your name, address, phone number, and sometimes a credit card or social security number. If you take the bait, the criminals now have all those sensitive details that they can use to steal your money or your identity. How I can tell it’s a scamBeyond a general awareness of these types of scams, what other clues tipped me off? First was the sender’s email address. Rather than adopt an official UPS name or address, the scammer used a random handle and domain name that had no relation to UPS. The email address is easy enough to review. Always scrutinize it to see if it seems legitimate or related to the company. Also: I clicked on four sneaky online scams on purpose – to show you how they workSecond, the message conveyed a sense of urgency — always a sign of malicious intent. In this case, the text told me that my package would be held by UPS for a mere three days before being sent back to the original sender. That’s a short timeframe without even an attempted redelivery, which UPS usually tries before sending the package back. Third, emails or messages from UPS generally include a tracking number or other means of identifying the package. This message contained no specific details and was instead generic and vague, another sign of a scam. More