TLDR
SMS from spoofed shortcode claiming USPS package can't be delivered, with link like usps.tracking redelivery[.]com or usps services[.]xyz. Landing page harvests address, card details and CVV. USPS Postal Inspection Service confirms USPS...
How it works
SMS from spoofed shortcode claiming USPS package can't be delivered, with link like usps.tracking redelivery[.]com or usps services[.]xyz. Landing page harvests address, card details and CVV. USPS Postal Inspection Service confirms USPS...
Red flags
- Urgent pressure to click, pay, or share codes immediately.
- A link or sender that does not match the official organization.
- Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What to do
- 1USPS Postal Inspection Service confirms USPS never sends unsolicited SMS asking for personal info.
- 2WHAT TO DO: verify tracking only at tools.usps.com or via the official USPS app.
- 3IF VICTIM: report to spam@uspis.gov + reportfraud.ftc.gov, call card issuer for chargeback under Reg E, monitor credit for 90 days.
Source
FAQ
Is USPS smishing — 'package held / address required' SMS a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What should I do first?
USPS Postal Inspection Service confirms USPS never sends unsolicited SMS asking for personal info.; WHAT TO DO: verify tracking only at tools.usps.com or via the official USPS app.; IF VICTIM: report to spam@uspis.gov + reportfraud.ftc.gov, call card issuer for chargeback under Reg E, monitor credit for 90 days.
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.