Fake USPS Tracking-Link Phishing Scam
Scammers send SMS messages impersonating USPS with fabricated tracking numbers and links to phishing sites. A crucial real-world norm: USPS only sends tracking texts if you specifically requested them — an unsolicited USPS tracking text is a near-certain scam.
Part of: Fake Tracking Number Scams
Last reviewed: 7 June 2026
The United States Postal Service delivers hundreds of millions of pieces of mail each week, making it one of the most impersonated organisations in the country. Fraudsters exploit this familiarity by sending fake tracking texts that look identical to genuine USPS SMS notifications.
The defining tell is a simple policy: USPS's Text Tracking service only sends messages to phone numbers that have explicitly opted in for a specific tracking number. If you receive an unsolicited USPS text about a package — especially one you cannot verify — it is almost certainly fraudulent.
These so-called 'smishing' campaigns (SMS phishing) have surged in recent years and are actively monitored by the US Postal Inspection Service (USPIS). Understanding both how the real USPS notification system works and the mechanics of the fake version will help you protect yourself.
How this scam works on the USPS brand
A typical smishing text reads: 'USPS: Your package [9400XXXXXXXXXXX] could not be delivered. Update delivery preferences: [link].' The link loads a convincing USPS-branded page that requests your name, address, and a credit card number ostensibly to 'rebook' the delivery.
The real USPS Text Tracking service sends only status updates for numbers you have registered — it never asks for payment information by text. Any legitimate redelivery scheduling is done at usps.com/redelivery using your actual tracking number, not through a link pushed to your phone unsolicited.
More elaborate versions clone the entire USPS website, including the familiar blue header and eagle logo, and then redirect to a secondary page requesting Social Security numbers or banking credentials under the guise of 'identity verification for package release.'
Common red flags
- You received a USPS tracking text you never signed up for — USPS only texts if you requested it
- The link is not usps.com but a lookalike such as usps-delivery[.]com or uspstracking[.]net
- The message asks for credit card, debit card, or banking details to release a parcel
- The tracking number format does not match USPS standard formats (real USPS tracking numbers are 20-22 digits starting with 9)
- Urgency framing: 'package will be returned within 24 hours'
- Message asks for your Social Security number or government ID for 'delivery verification'
- Sender is a random mobile number, not a short code registered to USPS
How to protect yourself
- Do not click any link in an unsolicited USPS text; go directly to usps.com and use the tracking tool
- Sign up for USPS Informed Delivery at usps.com to receive legitimate proactive notifications
- Remember the rule: USPS only sends tracking texts for numbers you explicitly enrolled
- If a package is genuinely undeliverable, USPS leaves a paper notice (Form 3849) at your address
- Never provide payment details, SSN, or ID documents in response to a text claiming to be USPS
- Forward the smishing text to 7726 and then delete it
- If you entered card details, call your bank's fraud line immediately
How to report it
- Forward the smishing text to 7726 (SPAM)
- Report USPS impersonation to the US Postal Inspection Service at postalinspectors.uspis.gov or call 1-877-876-2455
- File a complaint with the FTC at reportfraud.ftc.gov
- Report the phishing site to the Anti-Phishing Working Group at [email protected]
- If identity theft occurred, visit identitytheft.gov for a personalised recovery plan
Frequently asked questions
Will USPS ever send me a text I did not sign up for?
USPS's Text Tracking service only sends messages to numbers that have explicitly enrolled for a specific package. Unsolicited USPS tracking texts are not a standard USPS practice and should be treated as suspicious.
What does a real USPS tracking number look like?
Most USPS tracking numbers are 20-22 numeric digits, typically beginning with 9 (for example, 9400111899223397992196). You can verify any number at usps.com/tracking.
I scheduled a redelivery through a link in a text. What should I do?
If you entered personal or payment information, treat your data as compromised. Contact your bank, place a fraud alert on your credit file, and report the incident to the USPIS and FTC.
Is USPS Informed Delivery safe?
Yes. Informed Delivery is a legitimate, free USPS service you enrol in at usps.com. It sends grayscale images of your incoming mail each morning. Enrolment is a good way to know what to expect so you can spot fake delivery texts.