Fake USPS Customs-Hold Fee Scam
Scammers send texts and emails impersonating USPS, claiming an inbound international parcel is being held by US Customs and that a release fee must be paid via a link. USPS does not collect customs duties through text message links — legitimate import fees are handled through US Customs and Border Protection processes.
Part of: Fake Customs Scams
Last reviewed: 7 June 2026
International parcels sent through USPS do pass through US Customs and Border Protection inspection, and import duties or fees can arise for higher-value items. Criminals exploit this genuine process by sending USPS-branded messages claiming a fee is due before a package can be cleared — mimicking a real scenario that many online shoppers encounter.
The deception is in the payment channel: real customs fees on USPS-handled international packages are either pre-paid by the sender, handled through the USPS customs collection process with a physical notice left for the recipient, or cleared through CBP procedures. They are not collected through a payment link in an unsolicited text message.
The FBI and USPIS have both issued warnings about smishing campaigns using USPS customs hold scenarios, noting that these have become a frequently reported form of parcel-related fraud.
How this scam works on the USPS brand
A typical smishing message reads: 'USPS: Your international package [9400XXXXXXXXXX] is held by US Customs. A clearance fee of $X.XX is required. Pay: [link].' The link opens a convincing fake USPS website requesting card payment details.
Real customs holds on USPS-handled packages result in a USPS Form 3419-A or equivalent customs form being attached to the package, or in some cases the package being returned if import restrictions are met. No payment via SMS link is ever part of this process.
Variants of this campaign use slightly more official-sounding language about 'CBP Form 6059B' or 'Customs Declaration discrepancies,' borrowing real customs terminology to add credibility. Real CBP communication about import issues arrives through documented processes, not an SMS with a payment link.
Common red flags
- Unsolicited USPS text claiming a package is in a customs hold requiring SMS payment
- Link leads to a domain other than usps.com
- Message quotes a customs fee payable via a link rather than through official customs channels
- Tracking number does not resolve or shows a different status at usps.com
- Message arrives about a package you did not order internationally
- Site requests full card details including billing address and CVV
- Urgent deadline: 'package seized if fee not paid within 48 hours'
How to protect yourself
- Check the tracking number directly at usps.com — not via the link in the message
- If a genuine customs issue arises with a USPS package, check usps.com for guidance or contact USPS customer service
- Never pay customs fees via a link in an unsolicited text or email
- Forward the smishing text to 7726
- Report USPS impersonation to the USPIS at postalinspectors.uspis.gov
- If card details were entered, contact your bank immediately
How to report it
- Report USPS impersonation to the USPIS at postalinspectors.uspis.gov or 1-877-876-2455
- Forward smishing texts to 7726
- File a complaint with the FTC at reportfraud.ftc.gov
- Report to the FBI IC3 at ic3.gov
- If identity or financial information was submitted, visit identitytheft.gov
Frequently asked questions
How are real customs fees handled for USPS international packages?
For items with declared values above the de minimis threshold, US Customs may assess duties. For USPS-handled packages, any customs duties are typically collected on delivery or through an official CBP process — not via a text message link.
How do I know if a USPS customs message is real?
Enter the tracking number directly at usps.com. Real tracking will show if a customs hold is involved and provide guidance. Do not rely on links in text messages.
I clicked the link but did not pay. Am I at risk?
Clicking alone may expose your device to tracking but is generally lower risk than entering data. Run a security scan on your device and avoid revisiting the page.