JanJ
Most likely dumb luck. One on my customers had the same chance experience awhile back. With online commerce, package shipping is common, so odds are good such an email or text could coincide with a package order.
I see those same type of emails in my spam folder, and the occasional texts shows up in my blocked list.
No name, no tracking number, asking to open an attachment to see details…
For emails, you don’t need to open the attachment. Just look at the email header to see that it didn’t come from UPS, USPS etc.
Contacting the package sender for a tracking number is good practice if there’s a question about legitimacy. You done good there. 🙂
I’ve been seeing mostly .es and .de domains for the senders lately. I showed my mother in law how to see the real sender on the headers, andvto not open attachments.