---
content_id: package-problem-rerouted-held-or-picked-up-without-permission
canonical_url: https://11tracking.com/package-problems/package-rerouted-held-or-picked-up-without-permission/
title: Package Rerouted, Held, Redirected, or Picked Up Without Permission
meta_description: Learn what an unexpected package reroute, hold, redirect, or
  pickup record proves, how to protect your accounts, and who to contact next.
language: en
published_at: 2026-07-30
last_reviewed: 2026-07-30
carrier_scope:
  - UPS
  - FedEx
  - USPS
  - DHL Express
  - DHL eCommerce
  - Canada Post
  - Royal Mail
jurisdiction_scope:
  - United States examples
  - Canada examples
  - United Kingdom examples
  - International explanatory scope
---


# Package Rerouted, Held, Redirected, or Picked Up Without Permission

An unexpected reroute, hold, release, or pickup record is a reason to act quickly, but it is not proof that your account was hacked or your package was stolen. First, open the carrier's official site or app independently and confirm the exact event. An official record shows what the carrier system recorded; by itself, it may not identify who requested the action, whether that person was authorized, or who physically collected the package. If the parcel is still moving or waiting for pickup, ask immediately whether the carrier or shipper can stop or correct the action. Check legitimate explanations and security warning signs in parallel.

## First, identify what the record actually says

Similar-looking labels can describe different stages. The newest detailed event on the official carrier surface should control your next step.

| Recorded state | What it can confirm | What it does not establish by itself | Immediate branch |
|---|---|---|---|
| `Redirect requested`, `hold requested`, or similar | A request was recorded or accepted | Who submitted it, whether it will succeed, or whether the named recipient agreed | Ask which side requested it and whether it can still be canceled |
| `Rerouted`, `redirected`, `address corrected`, or `held` | The carrier's routing or handling changed | Whether the sender, recipient, carrier, or merchant caused the change | Confirm the controlling destination and the requester-role category |
| `Available for pickup` or `ready for collection` | The parcel was recorded at, or allocated to, a pickup location | That the final recipient collected it | Protect the pickup credential and confirm that the location physically has the parcel |
| `Delivered to pickup point`, `Access Point`, post office, or locker | The pickup location was recorded as receiving the parcel | Collection by the end recipient | Use the ordinary [available-for-pickup guide](/tracking-status/available-for-pickup/) unless the location or authorization is disputed |
| `Collected`, `picked up`, or `released to agent` | The carrier recorded completion under its release process | The identity, consent, or intent of the person who took possession | Use the disputed-collection steps below |
| `Returned to sender` or `intercept completed` | The shipment entered or completed a return or control path | Why it happened or who is financially responsible | Ask whether the sender initiated it and protect your purchase remedy |

If the change appears only in a text, email, search result, seller page, or third-party tracker, do not use the link or phone number in that message. Navigate to the official carrier domain yourself. If the official record does not show the same event, use the [fake delivery message guide](/package-problems/fake-delivery-message/) instead.

## Act now if the package may still be movable

Do not complete a long investigation before asking whether the action can be stopped. Cancellation or retrieval depends on the carrier, shipment stage, product, and the role that controls the shipment, and it is never guaranteed.

1. Open the official carrier tracking page or authenticated app directly.
2. Save the current event, destination, and carrier-local date and time.
3. Use verified carrier support to ask whether the parcel can be frozen, corrected, returned, retrieved, or held securely.
4. Ask whether the recipient can act or whether the sender, merchant, or carrier-contract holder must make the request.
5. Obtain a case number. Keep securing relevant accounts in parallel if there are independent warning signs.

If you need a verified support route, use the [carrier support directory](/carrier-support/). Do not rely on a number supplied by an unexpected message or caller.

## Who could have requested or caused the change?

The named recipient is not always the only person with delivery control. Eligibility differs by carrier, country, service, shipment stage, and shipper restrictions.

| Possible actor or cause | What to check | What the result would change |
|---|---|---|
| You or another authorized account user | Carrier-account history, saved delivery instructions, vacation holds, business users, and earlier confirmations | Remove or correct a stale preference; identify which authorized user acted |
| Sender or shipper | Merchant shipment history, recall, return, intercept, address correction, or delivery restrictions | The sender may need to explain or reverse the action through its carrier contract |
| Household member, office, concierge, or authorized agent | Whether someone at the address requested a hold or collected on your behalf | Confirm possession and correct shared delivery practices without making an accusation |
| Merchant or marketplace | Order-address changes, fraud review, replacement, return, or fulfillment activity | Secure the commerce account if the action is unknown and open the correct order case |
| Carrier operation | Failed attempt, access problem, safety restriction, address validation, disruption, or pickup-point capacity | Follow the normal attempt, address, or pickup process if the event is no longer disputed |
| Last-mile partner | A new local carrier and local tracking number | A normal network handoff is not an unauthorized reroute |
| Unknown or unauthorized actor | Unknown account activity, profile changes, code use, or unexplained collection | Secure accounts and credentials, then open both security and shipment cases as appropriate |

Checking legitimate explanations does not mean dismissing a possible security incident. It prevents the event label from being treated as stronger evidence than it is.

## Does an unexpected reroute or hold mean your account was hacked?

Not by itself. A carrier event can originate from a sender-side tool, a recipient account, a guest verification flow, a standing preference, an authorized person, or carrier operations. Treat the event as a security signal to investigate, not as a diagnosis.

Independent warning signs make account protection more urgent:

- an unknown action appears in authenticated carrier-account history;
- your recovery email, phone number, address, or delivery preferences changed;
- you received a login, password-reset, or one-time-code notice you did not initiate;
- an unknown user was added to a business or shared account;
- the merchant or marketplace order address, return, or replacement changed;
- your pickup code, QR code, barcode, delivery notice, or account screenshot was exposed;
- the linked email account shows unknown sessions, forwarding rules, recovery changes, or sent/deleted messages;
- there are other unknown orders, charges, accounts, or address changes.

If any of these signs exist:

1. Change the carrier-account password to a new, unique password.
2. Review active sessions and authorized users where the service provides those controls.
3. Correct recovery details and remove unknown delivery preferences.
4. Enable or reconfigure multifactor authentication.
5. Secure the linked email account, because it may control password resets and verification codes.
6. Secure the relevant merchant or marketplace account and review its order history.
7. Use the carrier's official fraud or account-security route as well as the shipment-support route if they are separate.

Changing a password or enabling multifactor authentication protects the account; it does not cancel an existing shipment action. Account security and parcel control must be handled as separate, parallel tasks.

## Ask the carrier to classify the event, not identify a suspect

Public tracking is not necessarily a complete audit trail. Ask for process facts that can change your next action:

- What exact event is recorded, and when?
- Is it a request, an accepted change, an operational scan, pickup readiness, or completed collection?
- Is it classified as sender or shipper-side, recipient or account-side, or carrier-operational?
- What channel category was used: authenticated account, guest flow, shipper system, customer support, physical notice, or internal operation?
- Did a saved preference or vacation hold apply?
- Did the shipper initiate or restrict delivery options?
- What address, pickup point, or destination currently controls the parcel?
- Is the parcel physically confirmed at that location?
- Can the action still be canceled, corrected, frozen, retrieved, or returned?
- If the parcel is marked collected, what release-method category is recorded: signature, identification, code or QR, notice, locker, agent, or another method?
- Must the sender or carrier-contract holder open the investigation or claim?
- Can the carrier correct an inaccurate public event, and what is the case number?

The carrier may not be able or permitted to disclose another person's identity, internal security controls, footage, or full request metadata. A requester-role classification, release-method category, correction decision, and case number may be enough to route the shipment and purchase cases without seeking private data.

## If tracking says “collected” or “picked up,” but not by you

First, confirm that the record says the parcel was actually collected. “Delivered to a pickup point,” “ready for collection,” and “available for pickup” describe a different state from an event that explicitly says the parcel was collected, picked up, or released.

If the official record does say `collected`, `picked up`, or `released`:

1. Ask household members, your office or concierge, and any known authorized representative whether they collected it.
2. Do not post or forward the tracking number, pickup code, QR code, barcode, delivery notice, address, signature image, or account history.
3. Review carrier-account actions and notifications. Secure the carrier, email, and commerce accounts if other warning signs exist.
4. Ask the carrier whether the parcel is definitely recorded as released and which release-method category was used.
5. Request a formal case and correction if the carrier record or location is wrong.
6. Ask the sender or merchant which non-delivery or order-dispute process applies if the parcel is not recovered.
7. Check marketplace, seller, payment, and claim deadlines immediately rather than waiting for the carrier investigation to finish.

A completed collection record is important evidence, but it does not by itself prove that the person named on the parcel personally appeared. Depending on the carrier and service, a cohabitant, authorized representative, recipient agent, or person using a legitimately delegated credential may be allowed to collect. That possibility does not prove the disputed collection was authorized; it explains why the event label alone cannot identify the collector or establish theft.

Do not confront a suspected collector, driver, neighbor, or pickup employee, enter private property, or attempt to test someone else's pickup credentials. Use the carrier, merchant, marketplace, payment, and appropriate official reporting channels.

## Why carrier controls cannot be reduced to one rule

Current official guidance shows materially different control models:

- **UPS in the United States:** eligible recipients can use UPS My Choice or a guest delivery-change flow, while shippers can use [UPS Delivery Intercept](https://www.ups.com/us/en/support/tracking-support/change-delivery-options/delivery-intercept) for eligible return, reroute, reschedule, or hold requests. Missing recipient options can also reflect shipper restrictions.
- **FedEx in the United States:** recipient-side options can exist through [FedEx Delivery Manager](https://www.fedex.com/en-us/delivery-manager.html), but the shipper can restrict changes. Some documented hold-at-location flows also allow a same-address household member or a person with a delegated QR code to collect, subject to service restrictions.
- **USPS in the United States:** [Package Intercept](https://www.usps.com/manage/package-intercept.htm) is primarily a sender or authorized-representative service, while eligible redelivery and delivery-instruction actions can belong to the addressee or an agent.
- **Canada Post:** [Package Redirection](https://www.canadapost-postescanada.ca/cpc/en/commercial/manage-shipments/package-redirection.page) is an eligible commercial sender-side tool. Many ordinary signature items can be collected by a cohabitant or authorized representative, while a separate Proof of Identity service is stricter.
- **DHL:** DHL Express On Demand Delivery and DHL eCommerce are not the same control system. [DHL Express options](https://delivery.dhl.com/) vary by country, service, and shipper settings. [DHL eCommerce U.S. guidance](https://www.dhl.com/us-en/home/customer-service/ecommerce-tracking-faq.html) says its support cannot change the address, date, or time after the shipment leaves the merchant, and the merchant may need to open the investigation.

These examples establish variation; they do not tell you which rule applies to a specific parcel. The service name, country, shipment stage, shipper restrictions, and current carrier record control.

## Protect credentials and preserve evidence

Keep the following privately:

- the official tracking timeline and raw carrier wording;
- carrier-account notifications and action history;
- the order confirmation and original delivery details;
- sender, merchant, and marketplace communications;
- the carrier case number and response;
- the release or collection record the carrier makes available;
- dates of each contact and the deadline stated by the seller, platform, issuer, or carrier.

Redact personal information before sharing evidence with anyone who is not an authorized carrier, seller, platform, payment provider, insurer, or official investigator. Never post a tracking number, address, identity document, pickup credential, signature, or unredacted screenshot in a public forum.

## Keep carrier and purchase deadlines moving in parallel

A carrier shipment investigation, seller remedy, marketplace protection process, payment dispute, and account-security recovery are separate workflows. Opening one does not reliably pause the deadlines for the others.

Open the carrier case needed to clarify, stop, or correct the shipment record. At the same time, ask the seller or marketplace what evidence and deadline apply if the package is not recovered, and check the rules for the payment method used. There is no universal deadline or guaranteed refund, reshipment, chargeback, claim payment, disclosure, reversal, or recovery.

Use [Who Should I Contact About a Package?](/delivery-actions/who-to-contact-about-a-package/) to identify which party controls the next action. If the dispute has moved beyond event classification, follow the [package claim guide](/delivery-actions/package-claim-guide/) without waiting indefinitely for another process to finish.

## Keep the next update handy

Save the shipment in the companion app and return to its tracking history while you wait for the next carrier update.

USTracking can organize available shipment events and monitor later recorded updates. It cannot identify who requested a change, reverse a reroute, recover a package, contact the carrier, or open a claim.

- [Google Play](https://play.google.com/store/apps/details?id=com.smartaistudio.ustracking)
- [App Store](https://apps.apple.com/us/app/ustracking-package-helper-ai/id6749468345)

## Official sources and actions

- [UPS: Change a Delivery](https://www.ups.com/us/en/track/change-delivery)
- [UPS: Delivery Intercept](https://www.ups.com/us/en/support/tracking-support/change-delivery-options/delivery-intercept)
- [UPS: Manage Your UPS Profile](https://www.ups.com/us/en/support/manage-your-profile)
- [FedEx: Hold Your Package at a Secure Location](https://www.fedex.com/en-us/shipping/hold-at-location.html)
- [FedEx: FedEx Delivery Manager](https://www.fedex.com/en-us/delivery-manager.html)
- [FedEx: Report Fraud](https://www.fedex.com/en-us/report-fraud.html)
- [USPS: Package Intercept](https://www.usps.com/manage/package-intercept.htm)
- [USPS: Redelivery — The Basics](https://faq.usps.com/articles/Knowledge/Redelivery-The-Basics)
- [DHL Express: On Demand Delivery](https://delivery.dhl.com/)
- [DHL eCommerce: Tracking FAQ](https://www.dhl.com/us-en/home/customer-service/ecommerce-tracking-faq.html)
- [Canada Post: Package Redirection](https://www.canadapost-postescanada.ca/cpc/en/commercial/manage-shipments/package-redirection.page)
- [Canada Post: Signature and Identity Services](https://www.canadapost-postescanada.ca/cpc/en/support/articles/parcel-services-shipping-in-canada/signature-and-identity-services.page)
- [Royal Mail: Redelivery](https://www.royalmail.com/receiving-mail/redelivery)
- [U.S. Federal Trade Commission: How To Recover Your Hacked Email or Social Media Account](https://consumer.ftc.gov/articles/how-recover-your-hacked-email-or-social-media-account)
- [U.S. Federal Trade Commission: What To Do if You're Billed for Things You Never Got](https://consumer.ftc.gov/articles/what-do-if-youre-billed-things-you-never-got-or-you-get-unordered-products)

## Related 11Tracking guides

- [Can I Change a Package Delivery Address, Reroute It, Hold It, or Intercept It?](https://11tracking.com/delivery-actions/change-delivery-address-reroute-or-hold/) — Check whether a change, hold, reroute, or intercept option may be available and how to confirm later events.
- [What Does “Available for Pickup” Mean?](https://11tracking.com/tracking-status/available-for-pickup/) — Confirm pickup readiness, location rules, ID requirements, and hold deadlines before collecting.
- [Is This Delivery Text, Email, Fee, or Tracking Link a Scam?](https://11tracking.com/package-problems/fake-delivery-message/) — Verify a suspicious delivery text, fee request, or tracking link without using the message.
- [Who Should I Contact About a Package?](https://11tracking.com/delivery-actions/who-to-contact-about-a-package/) — Identify whether the seller, shipper, or carrier controls the next package action.
- [Official Carrier Support Directory](https://11tracking.com/carrier-support/) — Find the correct official carrier support channel for your shipment without guessing links.
- [Package Says Delivered but I Did Not Receive It](https://11tracking.com/package-problems/delivered-but-not-received/) — Search after a Delivered scan and decide when missing-package escalation may be warranted.

[Browse all Package Help guides](https://11tracking.com/package-help/)