Have you ever received a text message out of the blue about a U.S. Postal Service (USPS) delivery that needs your attention, complete with a suspicious link? If you weren’t expecting a package and didn’t request tracking updates, do not click that link! You’ve likely encountered a smishing scam.
Smishing, a deceptive form of phishing, uses text messages to trick you into giving up your personal or financial information. Scammers often pretend to be trusted organizations, like the USPS, to make their messages seem real. While the USPS does use shortcodes to send legitimate SMS updates when you initiate tracking, these scam messages are designed to steal your sensitive data.
These criminals are after your Personally Identifiable Information (PII), which includes things like usernames, passwords, Social Security numbers, birthdates, credit card details, PINs, and other private data. They use this stolen information for identity theft and financial fraud.
The U.S. Postal Service provides free tools for you to track your packages. However, you must first register online or directly request tracking via text with your tracking number. USPS will never charge you for tracking services and, crucially, will not send unsolicited text messages with links. If you receive a text message about USPS tracking that you didn’t request and it includes a link, it’s a scam – do not click the link.
If you’re unsure about a text message but are expecting a delivery, resist the urge to click any links. Instead, report the message and go directly to the official USPS website, USPS.com, on your computer or phone to track your package safely.
For reliable information about USPS tracking and services, you can visit the USPS TEXT TRACKING FAQs. To learn more about protecting yourself from fraud, check out the USPS fraud prevention page.
Here’s how to report USPS-related smishing attempts:
If you believe you’ve received a USPS smishing text:
- Send an email to the U.S. Postal Inspection Service at [email protected].
- Copy the entire text message (without clicking any links) and paste it into your email.
- Include your name in the email and attach a screenshot of the text message, making sure the sender’s phone number and date are visible.
- Provide any relevant details, such as if you clicked the link, lost money, shared personal information, or experienced any impact on your credit.
- The Postal Inspection Service may contact you if they need more information.
- Forward the suspicious text message to 7726. This helps in reporting the scam phone number.
You can also report non-USPS related smishing to these law enforcement partners of the U.S. Postal Inspection Service:
- Forward the text to 7726.
- Report fraud to the Federal Trade Commission (FTC).
- File a complaint with the FBI’s Internet Crime Complaint Center (IC3).
Further Reading:
ALSO SEE BRUSHING >
ALSO SEE PHISHING >
