If you’ve received an unexpected message from the United States Postal Service, you might be the target of a USPS text scam. The goal of these scams is to obtain personal or financial information from victims in order to steal their money or commit other crimes. Here’s how the scam works, how to recognize it, and what to do if you receive a scam text message.

What Is the USPS Text Scam?

In June 2024, the US Postal Service warned readers on Twitter about this kind of scam:

USPS does send customers text messages if they have requested tracking for a specific package but it will not send unsolicited text messages. If you receive an unexpected message that claims to be from the USPS, it is likely from a scammer.

This kind of scam is called smishing and USPS-related smishing is widespread.

What Is Smishing?

Smishing is a form of phishing involving text messages. Phishing is when fraudsters contact individuals posing as a legitimate organization in order to commit identity or financial fraud, often by phone, email, or text.

Smishing text messages may:

  • include a malicious link that contains malware or directs you to a fake website
  • persuade victims to reveal sensitive information e.g. credit card details or passwords
  • trick users into transferring money to fraudsters
  • ask victims to download remote viewing software in order to steal financial information

The consequences of smishing can be serious. Victims may lose money or have crimes committed in their name. Personal or company data can be compromised and your credit record could be impacted.

How Does the USPS Text Scam Work?

There are various versions of the USPS smishing text. Here are some common examples.

  • Redelivery notification. USPS tried to deliver a parcel but no one one home. Pay a redelivery fee or follow a link to provide additional information e.g. a credit card number.
  • Held package notification. Your package is being held at a warehouse. You need to pay a fee or tax or provide personal or financial information to release the package.
  • Refund notification. You have overpaid for a delivery. Follow a link or provide bank information to trigger the refund.

Fraudsters can register for USPS Informed Delivery – a free service that includes preview images of your mail and status updates about your packages – using their victim’s details. This allows them to track and intercept their victim’s mail which means they can make their messages more convincing.

Check out this Reddit user’s experience with a USPS text scam if you want to see a detailed example.

Reddit USPS text scam example

How to Spot a USPS Text Scam

The main clue that you’ve received a USPS smishing text is if you aren’t expecting a package or have not requested tracking. The second thing to check is the tracking number. USPS text messages always include a tracking number. If it is missing or incorrect, the message is a smishing text scam. You can check your tracking number on the USPS website (always navigate to USPS.com directly, don’t click links in texts or emails as they may be fraudulent).

Look out for the generic signs of smishing such as urgent or surprising requests and spelling and grammar errors. Always ask yourself why the sender is asking you for information.

Text messages from a legitimate organization will often include instructions for how to stop receiving texts. If that is absent, that’s another red flag.

USPS text scam example

What to Do if You Get a Suspicious Text Message

  1. Don’t click on any links.
  2. Don’t reply or call a number included in the text.
  3. Report the text message.
  4. Delete the text message.
  5. Block the number.

If you’re unsure of the authenticity of a text message, contact the organization directly using the phone number on their official website or a bill.

If you’ve supplied personal or financial information, you may need to:

  • immediately contact your bank and (if using a work device) your IT department
  • monitor your accounts and credit record
  • freeze or cancel cards
  • update passwords
  • freeze your credit reports

How to Report a USPS Smishing Text

The USPS encourages targets of a USPS smishing text scam to send an email to [email protected]. The email should include:

  • the copy (text) of the scam text message
  • a screenshot of the text message showing the phone number and date
  • your name
  • any actions taken e.g. clicked the link
  • any negative impacts e.g. money stolen

You should also forward scam messages to 7726. Any phishing attempt (USPS-related or not) can be reported to the Federal Trade Commission and the FBI’s Internet Crime Complaint Center (ic3)

How To Prevent Smishing Attempts

In 2020, more than 240k people reported a case of phishing to the Internet Crime Complaint Center (IC3) costing over $54m in losses, and in 2023, 75% of organizations experienced a smishing attack. In other words, it’s likely that most of us will receive scam messages occasionally.

The important thing is to recognize a phishing message, email, or call when you get one. It’s advisable to only share your number with people or organizations you trust. You can also consider installing an antivirus on your mobile phone and PC.

Other USPS Scams

The USPS brand is also used in email phishing scams. Like the smishing scams, these emails often mention redelivery, a delivery schedule change, additional charges, or an intercepted package and may contain malicious links or attachments. They are likely to feature the same red flags as a USPS smishing text. In addition, they will come from an email address that is not an official USPS email address.

usps phishing scam example
Source

Don’t Be Duped!

The USPS does not send unsolicited text messages. If you have not signed up to track a specific packages and you receive a message from USPS, it is a scam. USPS related smishing scams are widespread and the victims can suffer serious consequences. Do not click on the link or respond. Report the message, then delete it and block the number. If in doubt, contact the USPS directly.