Fake USPS Shipment Confirmation Phishing Scam
Criminals send fake USPS package confirmation or hold notification emails for shipments the recipient never ordered, prompting them to click a 'manage package' link that leads to a phishing page or malware site. The real USPS only sends confirmation emails for shipments linked to your existing account or enrolled tracking.
Part of: Fake Order Confirmation Phishing Scams
Last reviewed: 7 June 2026
USPS confirmation emails are a normal part of online shopping: sellers send tracking updates, and USPS Informed Delivery notifies subscribers about incoming mail. Scammers exploit this familiarity by sending fake confirmation emails for shipments that do not exist, hoping panic about an unknown charge will drive a quick click.
The fear of an unexpected package being charged to a credit card or the curiosity about an unfamiliar order are both effective hooks. Recipients who click the 'view details' or 'cancel shipment' link in the fake email are taken to a phishing site that harvests credentials or payment data.
The reliable counter-test: any tracking number in the email can be verified in seconds at usps.com/track. If the number returns no result, the email is fabricated.
How this scam works on the USPS brand
Emails carry USPS branding and read: 'USPS Shipping Notification: A package addressed to you has been processed. To view or manage your shipment, click here: [link].' The link leads to a fake USPS portal requesting login credentials or payment details.
Some variants claim the package is being held due to an incomplete address and that a small address-update fee is required — combining the order confirmation lure with the delivery fee scam format.
Real USPS Informed Delivery emails are sent only to enrolled subscribers and contain grayscale images of letter-size mail, not requests for payment or credential entry. USPS tracking email updates are tied to tracking numbers you have enrolled at usps.com.
Common red flags
- Confirmation email for a shipment you did not order or expect
- Tracking number returns no result at usps.com
- 'Manage package' link goes to a non-usps.com domain
- Email asks for USPS login credentials or payment details via a link
- Email requests an 'address correction fee' to proceed
- Email address is not from @usps.com or @email.usps.com
- Urgency: 'package returned to sender if action not taken within 48 hours'
How to protect yourself
- Always verify any tracking number at usps.com before clicking any link
- Enrol in USPS Informed Delivery at usps.com for legitimate mail notifications
- Never pay address correction or package management fees via a link in an email
- Forward suspicious emails or texts to 7726
- Report USPS impersonation to the USPIS at postalinspectors.uspis.gov
How to report it
- Report to the USPIS at postalinspectors.uspis.gov or 1-877-876-2455
- File a complaint with the FTC at reportfraud.ftc.gov
- Forward smishing texts to 7726
- Report phishing sites to [email protected]
- If financial details were entered, contact your bank immediately
Frequently asked questions
Why did I receive a USPS package confirmation for something I never ordered?
Phishing emails are sent to large lists of addresses without targeting — the sender does not know whether you are expecting a USPS package. Verify any tracking number at usps.com; if it shows no result, the email is fake.
Is USPS Informed Delivery safe to use?
Yes. USPS Informed Delivery is a legitimate free service at usps.com that provides daily mail summaries. Enrol at usps.com/informeddelivery — not via any link in an unsolicited email.