Skip to content

Companies

USPS scams: how the fake messages work

The USPS package scam is a fraudulent smishing and phishing campaign where scammers send unsolicited text messages or emails claiming a delivery failure, incorrect address, or unpaid redelivery fee. These messages trick victims into clicking a malicious link resembling the official postal service website to steal credit card numbers, personal data, and login credentials.

Last reviewed: August 9, 2026  ·  Drafted with AI assistance. Every figure on this page was checked against the source cited for it. Not yet reviewed by a human editor.

ScamPreventionGuide is an independent consumer-protection resource. We are not affiliated with, endorsed by, or sponsored by USPS. Company names and trademarks are the property of their respective owners and are used here only to identify the companies that scammers impersonate.

01

Is the USPS message real?

USPS only sends tracking notifications or SMS if the customer explicitly registered online or initiated a text message request with a specific tracking number; official USPS text messages originate from 5-digit short codes and never contain a web link. USPS officials and delivery staff never reach out via unsolicited text, email, or phone calls to demand payment, fees, or personal identification information (PII).

According to Federal Trade Commission (FTC) data published in April 2025, fake package delivery problems—specifically messages pretending to be from the U.S. Postal Service—ranked as the number one most reported text scam in the United States for 2024. Source: United States Postal Inspection Service.

02

Which versions are in circulation?

The versions in circulation, and what each one is after:

VersionHow it reaches youWhat it wants
Fake Package Delivery Failure / Redelivery FeeSMS (Smishing)Credit/debit card details, PII, and a small redelivery fee ($3.00–$5.00)
Unpaid Postage / Customs Detention ScamSMS / EmailCredit card information, billing address, and bank login credentials
Fake Delivery Failure Notification EmailEmail (Phishing)Malware download (virus), account usernames, passwords, and financial information
QR Code Package Scam (Quishing)Post / QRSmartphone malware installation and credential harvesting on a look-alike phishing portal
Phony Phone Call / Voicemail ImpersonationPhone (Vishing)Fear inducement, extortion, and capture of Social Security number and financial account details
03

What do the fake messages actually say?

We are not quoting example wording on this page. On 16 August 2026 we checked the quoted messages against the sources they were credited to, and the sources did not contain them — so the quotes were removed rather than reworded. We would rather show you nothing than show you an invented example of a real crime.

The exact wording changes constantly anyway. What does not change is the shape: a message you did not ask for, about a problem you cannot verify, with a link or a phone number supplied for you to use. Do not use either — reach the company the way you normally would.

04

How can you tell a real message from a fake one?

The differences you can check yourself:

  • The text message contains an active web link (genuine USPS text alerts never contain links).
  • The text or email originates from a random mobile phone number or an unverified standard domain rather than an official USPS 5-digit short code.
  • The message demands an immediate small payment (e.g., $1.50 or $3.00) for redelivery or customs clearance (USPS never charges unexpected redelivery fees via text).
  • The notification creates artificial panic by claiming a package will be immediately destroyed or returned unless acted upon within hours.
  • The web address in the link uses unofficial domains (e.g., .com, .net, .org variations mimicking USPS) instead of the official usps.com.
05

What should you do in the first hour?

It depends on how far it got. Find your situation:

  • Close the browser window immediately, run a device malware scan, and do not enter any further data.
  • Immediately change passwords for any compromised accounts, enable multi-factor authentication, and monitor credit reports for unauthorized activity.
  • Immediately contact your bank or credit card issuer to freeze cards, dispute fraudulent charges, and report the card compromise.
  • Immediately disconnect the device from the internet, run a full antivirus/anti-malware scan, and change all financial and email passwords from a secure, clean device.
  • Report the scam to the U.S. Postal Inspection Service by emailing spam@uspis.gov with a screenshot and the verbatim text body, and submit a fraud report to the FTC at ReportFraud.ftc.gov. Forward text scams to 7726.
06

Where do you report it?

U.S. Postal Inspection Service (USPIS) Mail Fraud Complaint Form and reporting email at spam@uspis.gov; phone: 1-877-876-2455 (https://www.uspis.gov/report).

Whatever the brand, two official channels take the report. File with the US Federal Trade Commission at reportfraud.ftc.gov, and — if money was lost or a computer was accessed — with the FBI's Internet Crime Complaint Center at ic3.gov. Reporting rarely recovers money on its own; it is what makes the next person's warning possible.

07

Sources