Have you ever received unsolicited text messages with an unfamiliar or strange web link that indicates a USPS delivery requires a response from you? If you never signed up for a USPS tracking request for a specific package, then don’t click the link! This type of text message is a scam called smishing. These scammers often attempt to disguise themselves as a government agency, bank, or other company to lend legitimacy to their claims. USPS utilizes the 5-digit short codes to send and receive messages to and from mobile phones.
The criminals want to receive personally identifiable information about the victim such as: account usernames and passwords, Social Security number, date of birth, credit and debit card numbers, personal identification numbers (PINs), or other sensitive information. This information is used to carry out other crimes, such as financial fraud.
The Postal Service offers free tools to track specific packages, but customers are required to either register online, or initiate a text message, and provide a tracking number. USPS does not charge for these services! USPS will not send customers text messages or e-mails without a customer first requesting the service with a tracking number, and it will NOT contain a link. So, if you did not initiate the tracking request for a specific package directly from USPS and it contains a link: don’t click the link!
If you suspect the text message you have received is suspicious but are expecting a parcel, please do not click on any links. Rather, report it and visit USPS.com from your mobile device or computer for tracking and additional resources.
Smishing isn’t only associated with “USPS” but can be disguised as other numerous agencies or companies. Be on guard as these emails and text messages are only becoming more and more realistic as we continue to move into this AI world.