Sender check · UPS

Is pkginfo@ups.com a legit email address?

Is pkginfo@ups.com a legit email address? Yes: UPS lists pkginfo@ups.com among the nine addresses a real UPS email comes from. Delivery scams copy the look of those emails, so check the headers and the links before you pay for or click anything.

Updated October 10, 2026 · 3 min read

Short answer

Yes. UPS’s tracking support page lists pkginfo@ups.com among the addresses a real UPS email comes from, together with eight more, all on ups.com. A forged email can show the same From line, so confirm that your provider recorded dmarc=pass for ups.com, and that links start with https://www.ups.com or https://billing.ups.com. If an email asks you to pay for a package, track the package yourself on ups.com and pay there.

Real UPS email addresses

ups.comAll nine sender addresses UPS lists are on ups.com: pkginfo@ups.com, mcinfo@ups.com, auto-notify@ups.com, customer-notifications@ups.com, accountconfirm@ups.com, emailinfo@ups.com, invoice-notification@ups.com, UPSAdministrationSupport@ups.com, donotreply@ups.com.DMARC policy: p=reject

Source: the question about texts, emails and calls claiming to be UPS on UPS Tracking Support. The same answer says a real UPS link starts with https://www.ups.com or https://billing.ups.com, and real UPS texts come from 75137 or 24031 (one copy of UPS’s answer names only 75137).

Checked October 10, 2026 against UPS’s own help pages. DMARC policies were looked up in public DNS on October 10, 2026. A p=reject policy tells receiving servers to refuse mail that fails DMARC for the domain.

Check a sender

Paste the sender’s address, and the headers if you have them. The scam email checker compares the domain with official brand domains and reads the SPF, DKIM and DMARC results. It shows signals, not a verdict.

Copy it from the email, with the name if you like: UPS <pkginfo@example.net>

Add the email headers (optional, more signals)

Runs in your browser. To check the domain, its name (never the full address or the headers) goes to Cloudflare’s public DNS resolver and to rdap.org for the registration date.

Is pkginfo@ups.com real? What UPS confirms

UPS answers this on its Tracking Support page, under the question about a text, email or phone call from someone claiming to be UPS. A real UPS email comes from one of nine addresses, all on ups.com and listed in the table above; pkginfo@ups.com is one of them.

The same answer gives three more checks:

UPS’s fraud page also says that UPS does not request payments, personal or financial information, account numbers, IDs or passwords in an unsolicited way by email, mail, phone or fax, or in exchange for transporting goods. A “delivery fee” email with a payment form contradicts that.

How to check the headers of a UPS email

UPS’s fraud page points out that fraudulent emails often appear to come from trusted sources and that the true sender may show only in the internet headers. In the new Outlook for Windows, open the message and select More actions > View > View message details; Gmail on a computer: More > Show original; other apps: see how to get the full headers. Then read the topmost Authentication-Results, the one your own provider added. A genuine message from pkginfo@ups.com looks roughly like this (shortened):

Authentication-Results: mx.example.net;
  dkim=pass header.d=ups.com;
  spf=pass smtp.mailfrom=ups.com;
  dmarc=pass (p=REJECT) header.from=ups.com
  1. header.from=ups.com and dmarc=pass mean SPF or DKIM passed for a domain aligned with the From address (RFC 9989). That is the proof the message came from UPS’s systems.
  2. dmarc=fail for ups.com means the From address was forged. ups.com publishes p=reject, so providers that enforce DMARC normally refuse such mail before it reaches you.
  3. A pass for a different domain proves only that the message came from that domain, whatever name the inbox shows.

The email header analyzer reads the verdicts for you. What is a DMARC record explains what p=reject asks receiving servers to do.

Look-alike patterns in fake UPS delivery emails

UPS’s fraud page lists common indicators of a fraudulent email, among them altered website addresses such as www.unitedparcelservices.com instead of www.ups.com, and links with numbers in place of letters, abbreviations or slight misspellings. Hover over a link (long-press on a phone) to see where it really goes. The same tricks show up in sender addresses:

The scam email checker above compares the sender with official carrier domains and flags these patterns. Shopping notifications are checked the same way: see the Amazon sender check and all sender checks.

Report a fake UPS email

  1. Don’t respond, contact UPSUPS’s fraud page says not to respond to a suspicious text, call or email and links an Email UPS form for reporting it (Protect yourself from fraud and scams).
  2. Pay only after tracking it yourselfIf a message asks you to pay for a package, UPS says to track it first and select “pay now” there; for a bill, log in to the billing center.
  3. Check your accountUPS account holders can confirm there is no suspicious shipping or billing activity by logging in at ups.com.

Sources

Brand help pages used for this check:

Frequently asked questions

Is mcinfo@ups.com a legit email?

Yes, mcinfo@ups.com is on UPS’s list of addresses a real UPS email comes from, like pkginfo@ups.com, auto-notify@ups.com and six others. As with every sender, the From line alone proves nothing: the headers should show dmarc=pass for ups.com.

Does UPS email you to pay a delivery fee?

UPS says that if a message asks you to pay for a package, you should track the package first and select “pay now” on the tracking page; for a bill, log in to the billing center. Never pay through a link or form in the email itself.

Which numbers does UPS send texts from?

UPS says a real UPS text comes from 75137 or 24031. A delivery text from any other number deserves the same suspicion as an email from an address that isn’t on UPS’s list.

How do I report a fake UPS email?

Don’t respond to it. UPS’s page Protect Yourself From Fraud and Scams links an Email UPS form for reporting suspicious emails, texts and calls. Then delete the message.

More sender checks

Facebook and facebookmail.comIs @support.facebook.com a legit email? Meta’s own list of sending domains (facebookmail.com, fb.com, meta.com), how to check headers, where to report fakes. Instagram security emailsIs security@mail.instagram.com a legit email? What Instagram’s help center confirms, which Meta addresses it also uses, how to check the headers, how to report. Microsoft account security alertsIs accountprotection.microsoft.com a legit email? The one alert sender Microsoft names, how to check a message’s headers, common fakes and how to report them. PayPal emailsIs service@paypal a real email? What PayPal confirms about its emails, why a genuine PayPal invoice can still be a scam, how to check headers and report fakes. Amazon emailsIs a “chargeback alert” from amazon.com a real email? Amazon’s own rules for its emails, how to confirm one in Message Center, check headers and report fakes. Scam email checkerFree scam email checker: enter a sender’s address to spot look-alike brand domains, free or disposable senders, new domains and Reply-To tricks.

Start using our email validation software today!

Get 100 validations per month for free