USPS package delivery text scam (smishing)

The Scam

An unexpected text that claims to be from the U.S. Postal Service about a package and includes a link. It might confirm an order, say a package is out for delivery, or report a problem like unpaid postage, a missed delivery, or shipping preferences you need to update. According to the FTC, the link leads to a look-alike of a real website that asks for personal or financial information, and anything you pay or enter, including your card number, name and address, goes to the scammer. The U.S. Postal Inspection Service says the criminals are after details like account usernames and passwords, Social Security numbers, dates of birth, card numbers and PINs, which they use for other crimes such as financial fraud. Texts claiming to be from FedEx or DHL work the same way.

The Targets

Anyone with a mobile phone, especially people expecting a package.

Red flags

• A USPS text you never signed up for: USPIS says USPS only texts or emails you after you request tracking with a tracking number
• A link in the message: USPIS says real USPS tracking texts will NOT contain a link
• A claim of unpaid postage, a missed delivery, or a need to update your address or shipping preferences
• A link that opens a look-alike website asking for card, payment or personal details
• A request for a fee: USPS does not charge for its tracking services

Your Move

• Don't click the link or reply, even if you're expecting a package
• Check tracking yourself at USPS.com or on the retailer's site or account you ordered from
• If you already opened the link (even without clicking "submit"), notify your bank or card company
• Report it to USPIS at [email protected]: paste the text (without clicking the link), add your name and a screenshot showing the sender's number and date, and say whether you clicked, lost money or shared personal info
• Forward the text to 7726 (SPAM) and report it at ReportFraud.ftc.gov
• Filter and block texts from unknown senders, then delete the message

More steps for any scam link: I clicked a scam link. What now?

Related sources

• FTC Consumer Alert: Think that text message is from USPS? It could be a scam (Apr 23, 2025)