Wife got caught with a similar phishing attempt, except this was a text. She had legitimately had a missing package and was in the middle of dealing with it and was waiting on a communication for a fix when the fake text came in. Just incredibly unlucky timing that made it all feel 'right'. Realized it like 30 minutes later when the real communication came and cancelled the cards, but at the scale and frequency of spam these days they're bound to find people in plausible situations where their scam doesn't feel quite so out of place.