The USPS Text Scam Explained: How to Spot and Report It
The USPS text scam is a smishing attack in which criminals send text messages impersonating the United States Postal Service, claiming a package is delayed or held and directing the recipient to a fraudulent link to "fix" the problem. It has become one of the highest-volume text scams in the United States, prominent enough that the US Postal Inspection Service (USPIS), the federal law enforcement arm of the Postal Service, has issued repeated public advisories about it.
The one fact that defuses the entire scam is this: USPS does not send customers unsolicited text messages containing links about package problems. If a text claims to be USPS, mentions a held or misaddressed package, and includes a link you did not ask for, it is a scam. This article explains how the scheme works end to end, why it spread so widely, how to tell real carrier messages from fakes, and exactly where to report it.
Anatomy of the Scam
The USPS text scam follows a consistent script with cosmetic variations. A typical flow:
- The hook. You receive a text claiming a USPS package could not be delivered, is held at a facility, or has an "incomplete address." An illustrative reconstruction (not a real quoted message): "USPS: Your package is pending due to an invalid address. Update your information within 24 hours or the item will be returned: [link]."
- The fake site. The link leads to a counterfeit page dressed in postal branding, often on a domain that includes "usps" somewhere in a longer, unofficial address.
- The ask. The site requests your name, address, and phone number, then pivots to the real goal: a small "redelivery fee" or "customs charge," typically a dollar amount trivial enough to pay without thinking.
- The harvest. The card number, expiration date, and security code you enter go straight to the criminals. In many variants the personal details are harvested too, feeding later identity theft or more targeted scams.
- The follow-on. Victims who pay are sometimes hit again, either with additional charges on the stolen card or with new scams referencing the information they surrendered.
Some waves of this scam skip the fee and focus purely on credential or data harvesting; others impersonate private carriers with the same structure. The postal version dominates because nearly everyone is expecting a package at any given moment, and because a small official-looking fee request feels routine.
Why This Scam Works So Well
The USPS text scam is a case study in social engineering efficiency:
- Universal plausibility. E-commerce means a "package problem" is believable for almost any recipient on almost any day.
- Low-stakes framing. A tiny fee reads as an errand, not a transaction worth scrutinizing. The victim's guard never goes up.
- Urgency with a deadline. "Within 24 hours or the item will be returned" manufactures time pressure, the classic smishing accelerant.
- Small screens. On a phone, the fraudulent URL is truncated and the fake site's flaws are harder to spot.
- Trusted brand. The Postal Service touches nearly every household, and its branding is familiar enough that a rough imitation passes at a glance.
If you want to see how this format sits alongside the other major scam-text templates, our library of smishing examples with illustrative sample texts catalogs nine of them, including this one.
What Real Carrier Texts Look Like
The headline rule needs precision, because carriers do send some legitimate texts. The distinction is solicitation. USPS offers tracking notifications through its Text Tracking service, but only when you request them, for example by texting a tracking number to USPS's short code or signing up for updates on a specific shipment. Those messages report status. They do not ask you to click a link to pay a fee, confirm your address, or enter personal information.
| Signal | Legitimate USPS message | Scam message |
|---|---|---|
| Initiation | Only after you sign up or request tracking | Arrives out of nowhere |
| Content | Status of a shipment you identified | A problem requiring your action |
| Links | Status texts do not ask you to click a link to resolve a problem | Link to "update address" or "pay fee" |
| Payment | Never requests payment by text | Requests a small fee by card |
| Personal data | Never requests it by text | Requests name, address, card details |
| Pressure | None | Deadline, threatened return of package |
Private carriers publish similar guidance: unsolicited texts demanding payment or personal information via a link are not how any major US carrier operates. When in doubt, the safe universal habit is to track packages only by typing the carrier's website address yourself or using its official app, and entering the tracking number from your original order confirmation.
What to Do If You Receive One
- Do not click the link or reply. Even a reply confirms your number is live.
- Report it to USPIS. The Postal Inspection Service asks recipients to email spam@uspis.gov with a screenshot of the message showing the sender's number and the date sent, then delete the text.
- Forward it to 7726 (SPAM). This industry short code routes the message to your wireless carrier's filtering systems.
- Report the fraud to the FTC at ReportFraud.ftc.gov.
- If you lost money or entered card details, contact your bank or card issuer immediately to dispute charges and replace the card, and file a complaint with the FBI's Internet Crime Complaint Center at ic3.gov.
- If you entered personal information, consider a credit freeze with the credit bureaus and monitor your accounts. IdentityTheft.gov, the FTC's recovery site, provides a step-by-step plan.
What If You Already Clicked?
Clicking alone is usually not catastrophic; the danger is what you type afterward. If you clicked but entered nothing, close the page, avoid downloading anything it offered, and report the message as above. If you entered payment or personal details, act on steps 5 and 6 immediately. Speed matters most with card data, where a fast dispute and replacement contains the damage.
The Bigger Picture: Package Scams Are a Category
The USPS version is the flagship, but the same template gets reskinned constantly: private-carrier impersonations, customs-fee variants targeting international shoppers, and retailer "delivery problem" texts during holiday seasons. All inherit the same tell. Legitimate shippers and carriers resolve delivery problems through their own websites, apps, and delivery notices, not through unsolicited texted links demanding data or fees. Recognizing the template, rather than memorizing any single brand's version, is the durable defense, which is why security educators treat this scam as the entry point for broader smishing awareness.
There is also a lesson for legitimate organizations that text their communities. Every scam wave that abuses texted links makes recipients warier of all SMS. Organizations that send messages the right way, only to opted-in recipients, from registered and consistent numbers, with recognizable branded links and no requests for sensitive data, keep their channel trustworthy even in a polluted environment. That standard, reflected in the CTIA Messaging Principles and Best Practices and the TCPA framework (47 U.S.C. 227), is what separates organizational texting people trust from noise they delete.
Frequently Asked Questions
Does USPS ever send text messages?
Yes, but only ones you asked for. USPS Text Tracking sends status updates on shipments when you sign up or text a tracking number to its official short code. USPS does not send unsolicited texts with links about held packages, address problems, or fees. An out-of-the-blue USPS text with a link is a scam.
What is the fake USPS text trying to get?
Primarily your payment card details, harvested through a small fake "redelivery" or "customs" fee, and secondarily your personal information (name, address, phone), which fuels identity theft and future targeted scams. Some variants aim to install malicious software or harvest account credentials instead.
How do I report a fake USPS text?
Email a screenshot of the message, including the sender's number and date, to spam@uspis.gov, the US Postal Inspection Service's smishing reporting address. Also forward the text to 7726 (SPAM) for your carrier, report the fraud at ReportFraud.ftc.gov, and file with the FBI IC3 at ic3.gov if you suffered a loss.
I paid the fee on a fake USPS site. What now?
Call your card issuer immediately, dispute the charge, and request a replacement card. File reports at ReportFraud.ftc.gov and ic3.gov, and monitor statements for follow-on charges. If you also entered personal details, use IdentityTheft.gov for a recovery plan and consider freezing your credit with the bureaus.
Why do I get USPS scam texts when I am not expecting a package?
Scammers blast these messages to enormous lists of numbers compiled from data breaches and number generators; they have no idea whether you have a shipment. The scam relies on volume, because at any moment a meaningful share of recipients happens to be expecting something.
Keep Your Organization's Texts Above Suspicion
FRANSiS gives nonprofits, healthcare organizations, schools, and government agencies a consent-based SMS platform with registered sender identities and an AI Powered Helper for two-way conversations, so your messages carry the trust that scammers counterfeit. Contact us to build texting your community can believe.
