Delivery notification email is the mail sent about a parcel from order confirmation through to delivery confirmation. A buyer supplies an email address at checkout, the retailer passes that address to the carrier and to further companies in the transport chain, and the same address can keep receiving retailer mail after the parcel arrives. A separate alias for each retailer or each order keeps the delivery stream apart from the primary inbox, so the stream can be paused or removed when it is no longer needed.
Automated delivery messages
Delivery mail arrives as a fixed series of automated messages. The Shopify customer notifications documentation describes customer notifications as automated emails and SMS messages about orders, shipping updates and account activity, and states that most are sent automatically and cannot be deactivated. The series it lists is order confirmation, shipping confirmation, shipping update, out for delivery and delivered.
Because the series is automatic, a buyer has little control over it during transit: the retailer treats the messages as part of fulfilling the order rather than as optional mail. After the delivered message, further messages to the same address may be offers, restock alerts or review requests, sent under the same sender name and in the same format as the delivery updates. The checkout address also serves for account recovery, order history and support, a separate matter covered in the AliasFleet guide to how email aliases actually work. For delivery alone, the point is that the address receiving tracking updates continues to receive mail long after the parcel has arrived.
Checkout addresses in the carrier chain
An online order places the checkout address in the hands of more than one company: the retailer, the carrier, and the service providers each of them uses for shipment data. The carriers describe this distribution in their own privacy notices.
Royal Mail states that a sender may provide a recipient phone number or email address so Royal Mail can provide delivery updates, and that a recipient name and address are used to collect, sort, track and deliver an item. The sender in that statement is the retailer or the person who posted the parcel, so the address reaches the carrier as part of the shipment record rather than only as a retailer account detail, as set out in the Royal Mail Group Privacy Notice.
DHL describes onward sharing in broader terms: its privacy notice states that it may be necessary to pass address and order data to contractors when products are ordered, and that shipment data, including address data, may be disclosed to companies involved in the shipment transportation process, such as shipment transport and delivery service providers. See the DHL Privacy Notice.
Amazon Shipping describes the same flow from the delivery platform side: its privacy notice states that it receives, uses and stores email addresses and other personal information that third parties provide to Amazon Shipping to enable delivery of shipments, with the third parties being the senders and partners that hand shipment data over. See the Amazon Shipping Privacy Notice.
The consequence is that a primary inbox address typed at checkout is held under several separate policies at once, with no single control that removes it from every holder. Control at the point of entry therefore matters more than unsubscribing afterwards, which addresses one sender while the other holders keep the address.
Separate aliases for retailers and orders
The method is one alias per retailer, or one alias per order for retailers used rarely. The alias is entered at checkout instead of the primary address. Order confirmation, shipping confirmation, tracking updates and the delivered message arrive through the alias and forward to the primary inbox while the parcel is moving. After delivery, the buyer observes what else arrives on that alias; if the stream becomes marketing, the alias is paused or removed and that stream ends. The primary inbox address was never given to the retailer or the carrier, so it does not need to change.
One alias per retailer suits a shop used often, because the whole relationship with that shop sits behind one address and one control; one alias per order suits a shop used once, because each order stream can be ended separately and a leak or sale of one order address cannot be confused with another. The cost is administration: more aliases mean more addresses to track, and naming each alias after its retailer or order prevents confusion when an old order confirmation is needed.
The same principle as using a different email address for every website applies here, and the general case is set out in different email for every website. Delivery streams repay the principle quickly because they are high volume and short lived: they matter for days and then become noise.
Plus addressing is a weaker version of the same idea. A plus address still contains the primary address, so it can be reduced back to it, and some checkout forms reject it. The limits are described in email plus addressing versus aliases and in the notes on Gmail plus addressing limitations. A forwarding alias does not expose the primary address inside the address itself, which is what makes pausing it effective; the wider distinction is covered in email forwarding versus aliases.
Imitation delivery messages
Delivery mail is also among the most copied message types in phishing. The FTC lists a fake package delivery notification among the fake messages scammers send to trick people into giving up personal or financial information, and advises against clicking links in unexpected texts. The guidance is published as FTC spam text guidance.
The United States Postal Inspection Service gives a sharper test for postal messages. It states that USPS will not send text messages or emails without the customer first requesting the service with a tracking number, and that such a message will not contain a link. A tracking message with a link, or a message about a parcel the buyer never ordered, fails that test. The statement is on the USPIS smishing page, and the wider set of postal scam patterns is listed in the USPS scam scheme alerts.
A separate alias per retailer helps in a small but real way: a delivery message arriving on the alias for a retailer the buyer did not order from, or naming an unexpected carrier, stands out, because the buyer knows which alias belongs to which order. The alias alone does not verify a message: the check remains to open the carrier site or app directly and enter the tracking number there, rather than following a link in the message, as described in how to check if an email is phishing.
Suspected scam texts can be reported by forwarding them to 7726 (SPAM) and by reporting to the FTC at ReportFraud, and non-postal smishing can also be reported to the FBI Internet Crime Complaint Center at IC3. If a delivery address has already appeared in a known breach, the Have I Been Pwned check shows where it was exposed, and the steps after that are in how to check if your email was leaked.
Delivery stream boundaries
An alias controls the email stream only. It does not hide the buyer name, postal address or phone number from the retailer or the carrier, because delivery needs all three. A buyer who wants the postal address kept private needs a different measure, such as a parcel locker or a pickup point.
An alias also does not stop the retailer from holding the order record, and it does not delete data already shared with the carrier chain. What it does is stop the future stream: no new marketing to that alias, no new breach exposure through it, and no need to change the primary inbox address when one retailer stream goes bad. Whether a given retailer accepts an alias address at checkout varies, and whether a given retailer adds a checkout address to marketing depends on that retailer policy and the consent given at checkout. Both are stated here as limits, not as guarantees, and no numerical claim is made about how often checkout addresses receive post-delivery marketing.
An alias is also not a way to avoid messages the buyer still needs: order problems, returns and refunds all arrive through the same alias, so it should stay active until the order is complete, including the returns window. Pausing it on the day the parcel arrives risks missing a recall notice or a refund message. The order is delivery, then the returns window, then pause.
AliasFleet delivery aliases
AliasFleet provides email aliases that forward to a primary inbox, with each alias managed separately. A buyer creates one alias per retailer or per order, enters it at checkout, and pauses or removes it when the delivery stream is finished. AliasFleet states the product in those terms: aliases are managed, persistent forwarding addresses under the user's control, not short lived inboxes. Whether an alias is worth creating for a given order is a judgement the buyer makes per shop; the delivery case is the one where the answer is most often yes, because the stream is short lived and the sender list is long.
For readers who want to go further, the question of whether spam can be stopped outright is answered in a guide to stopping spam permanently, and the safety of aliases in general is covered in are email aliases safe. The remaining question after delivery mail is where else a primary address leaks, and that is covered in how spammers get your email address.
Top comments (0)