Office of Information Technology
October 31, 2023
Tags Phishing Email (in the wild)

USPS delivery scam (text messages)

Phish Bowl Alerts

Be on the lookout for fake text messages and emails, supposedly from the USPS, such as the following example that notifies its recipient of a package that arrived in their warehouse but couldn't be delivered "due to incomplete address information." Read the US Postal Inspection Services alerts Smishing: Package Tracking Text Scams and Fake USPS® Emails for more details.

A couple of clues that this is phony:

  • It's from a +44 number, which is the international calling code for the United Kingdom.
  • For some reason, though the USPS can't ascertain the remainder of your delivery information, they do have your phone number so they are able to text you.
  • USPS should have information about your package, such as an identification number, but instead it is just called "the USPS package."

Screenshot of a text message from +44 number that begins: "The USPS package has arrived at the warehouse and cannot be delivered due to incomplete address information ... please click on the image to share it to Google browser, complete your address ..."