Beware of Package Phishing Scams Disguised as USPS Delivery Alerts

The Unvarnished Truth

• Unsolicited texts regarding package delivery issues are mostly not from the U.S. Postal Service (USPS), but rather, they are often phishing scams.
• Recently, the USPS has become one of the most imitated brands in phishing scams, as indicated by a report from the software company Guardio.
• USPS has issued advisories to its customers about these messages, advising them not to click on unfamiliar or suspicious web links in such texts.

Keep an eye out. If you receive an unexpected text message about a package delivery issue demanding your attention, it’s probably not from the U.S. Postal Service (USPS).

According to a phishing report by the software company Guardio, USPS is one of the most imitated brands in phishing scams in the recent quarter.

Last month, USPS issued a clear directive to its customers: Be cautious of mobile text messages with unknown or dubious web links claiming to be about a USPS delivery that requires your immediate attention.

In their advisory, the government agency stated, “If you never signed up for a USPS tracking request for a specific package, then don’t click the link! This type of text message is a scam called smashing.”

Scammers have been found to use a variety of methods. At times, they craft messages telling recipients that their package couldn’t be delivered due to an incomplete delivery address.

The deceptive message then prompts the customer to click a link to supply the full delivery address, supposedly to assist the shipment of the package.

Other commonly used baits include phrases like “your account has been suspended”, “there is suspicious activity on your account”, and “there is a package waiting for you at the Post Office.”

Karin Zilberstein, the vice president of product at Guardio, stated that these scams have become a “natural, yet very unsettling, consequence of the rise in online shopping.”

Zilberstein went on to say, “As more people order goods and services online, hackers exploit this trend by creating new, relevant scams.” She highlighted that these scams often imitate normal, day-to-day tasks, making the USPS a prime target.

USPS clarified that it only sends and receives SMS from and to mobile phones using 5-digit short codes when issuing package notifications.

Moreover, it doesn’t send customers text messages or emails unless the customer has first requested the service with a tracking number. Importantly, the agency insists that their messages will never contain a link.

Customers who are expecting a package and believe they’ve received a scam text should report it and only trust USPS.com for tracking details and more information.

“The Postal Inspection Service, the federal law enforcement and security branch of the United States Postal Service, not only investigates crimes against the Postal Service, its employees, and customers, but also plays an active role in crime prevention messaging to Postal customers,” a spokesperson for USPS announced.

Let us know what you think, please share your thoughts in the comments below.

Source