Fake USPS Carrier SMS Phishing Campaign
Mass SMS campaigns impersonate USPS with fabricated delivery alerts and address-confirmation requests, linking to phishing sites. USPS only sends text updates for tracking numbers you have specifically enrolled to receive notifications for — unsolicited USPS texts are a near-certain indicator of smishing.
Part of: Fake Carrier SMS Phishing Scams
Last reviewed: 7 June 2026
USPS operates a text notification service called USPS Text Tracking that sends shipment updates to phone numbers that have been registered for a specific tracking number. This opt-in design is the most important fact to know about USPS text notifications: if you did not sign up for updates on a specific package, USPS should not be texting you about it.
Criminals send USPS-branded smishing texts to millions of random numbers, exploiting the fact that many recipients will be coincidentally expecting a USPS package or will assume they may have forgotten to check one. The texts mimic the format of genuine USPS Text Tracking messages closely enough to fool recipients who are not familiar with the opt-in rule.
The USPIS actively investigates USPS smishing campaigns and publishes warnings about them. The FBI also issued a public service announcement specifically about a wave of USPS smishing campaigns that targeted millions of Americans.
How this scam works on the USPS brand
Messages follow variations like: 'USPS: Your package is scheduled for delivery today but requires an address confirmation: [link]' or 'USPS Tracking: Delivery attempt failed. Reschedule here: [link].' Both lead to phishing pages requesting personal information or card details.
Real USPS Text Tracking messages are short status updates (e.g. 'Your package with tracking number XXXXX is out for delivery') tied to a specific number you enrolled. They do not ask for address confirmation or payment via a link.
Some campaigns send texts after a real USPS delivery has occurred, referencing a tracking number that does resolve in the USPS system but that the victim did not sign up to track — the real delivery is used as 'proof' of USPS involvement to encourage trust in a secondary scam message.
Common red flags
- You received a USPS text you never signed up for — USPS only texts enrolled numbers
- Link does not go to usps.com
- Text asks for address confirmation or payment
- Tracking number does not match an expected delivery in your USPS account
- Text arrives from a random mobile number rather than a USPS short code
- Message asks for card or bank details
- Link URL contains 'usps' but is followed by unexpected characters or a different domain
How to protect yourself
- Remember the golden rule: USPS only texts if you enrolled a specific tracking number
- Go directly to usps.com and use USPS Text Tracking to enrol specific shipments you want to follow
- Verify any tracking number directly at usps.com without clicking the text link
- Forward suspicious texts to 7726
- Report USPS smishing to the USPIS at postalinspectors.uspis.gov
How to report it
- Report to the USPIS at postalinspectors.uspis.gov or 1-877-876-2455
- Forward smishing texts to 7726
- File a complaint with the FTC at reportfraud.ftc.gov
- Report to the FBI IC3 at ic3.gov
- Report phishing sites to the Anti-Phishing Working Group at [email protected]
Frequently asked questions
How do I enrol for legitimate USPS text notifications?
Visit usps.com and use the USPS Text Tracking feature to enrol a specific tracking number and your phone number. You will then receive status updates for that package only.
What should I do if a USPS text seems suspicious?
Do not click any link. Go directly to usps.com, enter the tracking number in the official tool, and check whether the package is real. Forward the text to 7726 and report to the USPIS.
Is USPS Informed Delivery different from USPS Text Tracking?
Yes. Informed Delivery is a free email service that sends daily images of your incoming letter-size mail. Text Tracking is a separate service for package status updates. Both are opt-in and neither sends unsolicited payment requests.