Smishing: Package Tracking Text Scams

INDIANA— Have you received unsolicited mobile text messages with an unfamiliar or strange web link that indicates a USPS delivery requires your response? Don’t click the link if you have never signed up for a USPS tracking request for a specific package—this type of text message is a scam.

Smishing is a form of phishing that involves a text message or phone number. Victims typically receive a deceptive text message intended to lure the recipient into providing their personal or financial information. These scammers often attempt to disguise themselves as a government agency, bank, or other company to lend legitimacy to their claims. USPS utilizes 5-digit short codes to send and receive SMS to and from mobile phones.

The criminals want to receive personally identifiable information (PII) about the victim, such as account usernames and passwords, Social Security numbers, date of birth, credit and debit card numbers, personal identification numbers (PINs), or other sensitive information. This information is used to commit other crimes, such as financial fraud.

The Postal Service offers free tools to track specific packages, but customers must either register online or initiate a text message and provide a tracking number. USPS does not charge for these services! USPS will not send customers text messages or e-mails without a customer-first requesting the service with a tracking number, and it will NOT contain a link. So, if you did not initiate the tracking request for a specific package directly from USPS and it contains a link, don’t click the link!

If you suspect the text message you have received is suspicious but are expecting a parcel, please do not click on any links. Instead, report it and visit USPS.com from your mobile device or computer for tracking and additional resources.

For more information about these services and other products, please visit USPS TEXT TRACKING FAQs:

To protect yourself and others from consumer fraud, visit our fraud prevention page

HOW TO REPORT USPS Related SMISHING:

To report USPS-related smishing, send an email to spam@uspis.gov.

  • Without clicking on the web link, copy the body of the suspicious text message and paste it into a new email.
  • Please include your name in the email and attach a screenshot of the text message showing the sender’s phone number and the date sent.
  • Include any relevant details in your email, such as whether you clicked the link, lost money, provided any personal information, or experienced any impacts on your credit or person.
  • The Postal Inspection Service will contact you if more information is needed.
  • Forward the smishing/text message to 7726 (this will assist with reporting the scam phone number).

Complaints of non-USPS related smishing can also be sent to any of the following law enforcement partners of the U.S. Postal Inspection Service: