Fake USPS Parcel-Locker Collection Phishing Scam
Criminals send messages pretending to be USPS, claiming a parcel has been redirected to a package locker and that recipients must pay a fee or verify identity through a link to collect it. USPS's legitimate locker notifications, including those for Informed Delivery and Parcel Select lockers, never require a separate payment link to access a waiting package.
Part of: Parcel Locker Phishing Scams
Last reviewed: 8 June 2026
The United States Postal Service operates package lockers at many post offices and participates in the Amazon Hub Locker and similar third-party networks. Scammers exploit public familiarity with these services by sending texts or emails claiming a parcel is waiting at a USPS locker near the recipient and will be returned or destroyed unless claimed quickly.
The message includes a link to a convincing but fake USPS website where victims are asked to confirm their identity or pay a small 'holding fee'. Both actions feed personal and financial information to the fraudsters.
Genuine USPS locker notifications are sent through Informed Delivery, linked directly to your tracking number, or managed through the retailer's own app. USPS does not send unsolicited payment demands to release a parcel from a locker, and the official site is always usps.com.
How this scam works on the USPS brand
A message says: 'USPS: A package for [name] is held at a postal locker at [vague location]. A $1.50 access fee is required within 8 hours to prevent return: [link].' The site mimics usps.com with a checkout form.
Some variants instruct victims to download a 'USPS Locker App' that is actually spyware. Others claim the locker contains a recorded delivery requiring a signature plus identity verification, harvesting passport or driver-licence images.
Legitimate USPS package-locker or parcel-safe notifications arrive through Informed Delivery (the free USPS service) or the retailer's platform and are always accessible by entering the tracking number directly at usps.com — no payment link is ever embedded in a notification.
Common red flags
- Message claims a USPS locker fee is required — USPS does not charge recipients to collect from lockers
- Link does not go to usps.com
- Request to download an app from a third-party store to 'access' your locker
- Request for identity documents (passport, licence scan) to claim a parcel
- Locker address is vague or does not correspond to a real USPS post office near you
- Urgency: package destroyed or returned in less than 12 hours
- Sender address is not a @usps.com email
How to protect yourself
- Track your parcel directly at usps.com using your tracking number
- Sign up for free USPS Informed Delivery at informeddelivery.usps.com to see real delivery updates
- Never pay a fee via a link in a text or email to access a USPS package
- Contact USPS customer service at 1-800-275-8777 if you have concerns about a delivery
- Forward the smishing text to 7726 and report to the USPIS at postalinspectors.uspis.gov
- If card details were entered, contact your bank immediately
- Report phishing emails to [email protected]
How to report it
- Report to the US Postal Inspection Service at postalinspectors.uspis.gov
- Email [email protected] with a screenshot of the phishing message
- Forward smishing texts to 7726
- Report to the FTC at reportfraud.ftc.gov
- If financial loss occurred, also file a report with your local police
Frequently asked questions
Does USPS charge recipients to collect from a package locker?
No. USPS-managed package lockers do not charge recipients to collect their mail or parcels. Any message claiming a fee is required to access a USPS locker is a scam.
How does Informed Delivery work?
USPS Informed Delivery is a free service that sends daily email digests showing images of letter-sized mail and tracking updates for packages. You register at informeddelivery.usps.com using your real address. It does not send payment requests.
Can I report a fake USPS website?
Yes. Report fake USPS websites to the USPIS at postalinspectors.uspis.gov and to the FTC at reportfraud.ftc.gov. You can also report phishing emails directly to [email protected].