
USPS smishing scams often involve fake package tracking notifications, which can be incredibly convincing.
The scammers behind these scams often use real USPS tracking numbers to make their messages seem legitimate.
Here's the thing: even if the message looks real, it's still a scam.
USPS never sends unsolicited text messages with links or attachments, so be wary of any message that asks you to click or download something.
Related reading: Usps Warns of Smishing Scams during the Holidays
What Is Smishing?
Smishing is a form of phishing that uses text messaging to deceive people into revealing sensitive information.
It's essentially a scam where a scammer sends a fake text message pretending to be a reputable source, like a government agency, bank, or institution.
Smishing messages often try to get you to reveal personal and financial information, such as your social security number, credit or debit card numbers, and account passwords.
A victim of smishing typically receives a deceptive text message from a scammer, and it can be very convincing.
Discover more: Ota Toll Scam Smishing Text Messages
How Scams Work
Scammers use social engineering tactics to trick victims into divulging personal info or downloading malware. These tactics include pretexting and SMS spoofing.
Pretexting involves creating a fake identity or scenario to make the story more believable, often a supposed package that needs additional information for delivery. This is a common tactic used in USPS scams.
SMS spoofing allows scammers to alter their sender ID or mask their phone number, making the text message seem legitimate. This makes it difficult to identify the true sender.
USPS text scams impersonate automated messages from the United States Postal Service, tricking recipients into thinking they've missed a package delivery. These fake texts often include messages like "Please confirm your address" to fool you into clicking links to malicious websites.
The goal of these fake texts is to collect personally identifiable information (PII), such as your name, address, and card details. This information can be sold on the dark web or used to steal your identity.
Discover more: Fake Microsoft Security Warning Email
Here are the two forms of social engineering used in USPS text scams:
- Pretexting: Creating a fake identity or scenario to make the story more believable.
- SMS Spoofing: Altering the sender ID or masking the phone number to make the text message seem legitimate.
These tactics are used to steal information through texts that guide users to spoofed sites mimicking the official USPS site.
Protecting Yourself
Legitimate companies will not ask you to confirm or provide personal information via text messages. If you receive a text message asking for this information, it's likely a scam.
The USPS does not text its customers directly about problems with packages. Scammers are taking advantage of this by sending fake text messages to trick people into sharing information or clicking on a link.
Be cautious of text messages from unknown senders, as well as unusual text messages from senders you do know. Scammers may use bad grammar, invalid tracking numbers, and outgoing links to trick you into clicking on a link.
USPS never includes outgoing links in its texts, even to the official USPS website. Avoid clicking links from texts claiming to be from the USPS.
You might like: Smishing Texts
Here are some telltale signs of a fake USPS text:
Don't respond to any suspected USPS scam texts. Engaging with these scam messages signals to scammers that your phone number is active, which can lead to more scam attempts.
For another approach, see: Smishing Scam Vdot Ez Pass
Responding to Scams
If you receive a suspicious text message claiming to be from the USPS, don't click on any links or reply to the message.
The USPS does not text its customers directly about package delivery issues, so it's likely a scam. Save a screenshot of the text message to share with law enforcement agencies and delete the message.
Block the number and update the security on your device to prevent further scams.
If you fall victim to a USPS text scam, lock down your USPS account and change passwords on any accounts where you used the same credentials.
Activate two-factor authentication to secure your accounts against attempted takeovers.
Contact your bank and freeze your credit report to prevent new accounts from being opened in your name.
Discover more: Scam Website Com for a Robux Prize Free
If you've exposed sensitive payment information, contact the card provider to cancel your card and dispute any unusual charges.
If you've clicked on a link or provided personal information, scan your device for viruses and use a virus removal tool to remove any malware.
To report the incident, file a report with your local police department, the Federal Trade Commission, and the United States Postal Inspection Service.
Here's a list of actions to take if you fall victim to a USPS delivery scam:
- Change non-unique passwords and create unique, secure passwords.
- Activate 2FA to secure your accounts against attempted takeovers.
- Contact your bank to cancel your card and dispute any unusual charges.
- Freeze your credit report to prevent new accounts from being opened in your name.
- Scan for viruses to remove any malware.
- File a report with local law enforcement, the FTC, and the USPIS.
Smishing and USPS
Smishing is a type of scam that combines phishing with short messages or texts. It's a technique used by scammers to trick people into sharing information or clicking on a link.
The U.S. Postal Service (USPS) has issued a warning about smishing scams, which are becoming increasingly common during the holiday season. These scams often involve fake text messages claiming that a package can't be delivered until the sender gets more information from the recipient.
A legitimate USPS text message will never ask for personal information or include outgoing links. If you receive a text message from USPS, it's likely to be a notification about a package you've ordered or a request to track your package.
USPS does not text its customers directly about any problems with packages, so if you receive a text message claiming to be from USPS, it's likely a scam. The agency has legitimate ways to track customers' packages, including signing up for text tracking or using the Informed Delivery service.
If you suspect a scam text, block and report the message. Don't click on any links or respond to the message, as this can confirm that your phone number is active and lead to more scam attempts.
Here are some signs to look out for in a scam text:
- Outgoing links: USPS never includes outgoing links in its texts.
- Unexpected Messages: You will only receive USPS messages if you request them specifically.
- Bad grammar: A professional organization like USPS won't text you with bad grammar.
- Invalid tracking number: Tracking codes sent to you via text message that can't be verified in the USPS Tracking tool are scams.
- Sense of urgency: Fake messages make users believe they will lose packages unless they click a link and act quickly.
To protect yourself from USPS smishing attempts, verify every message and never click a link in a text. If you request an SMS notification about a package delivery, USPS will include the following information:
- Who’s delivering the package (USPS).
- The package’s tracking number.
- The delivery status of the package.
- The date, time, and location for pickup.
- Instructions on how to stop further texts.
Package Tracking
Package tracking texts from the USPS are straightforward and easy to understand.
They generally include a tracking number, package status, date, time, and location.
You can expect to receive a text message with your tracking information, like this example: USPS 01123456789123456789, Expected Delivery by: Monday, September 11, 2017 Reply STOP to cancel.
USPS tracking texts never include clickable links.
To stop receiving further messages, simply reply with the word STOP.
A different take: Fbi Warning Smishing Texts
Featured Images: pexels.com


