Have you received an unexpected text or email about a package? It could be a scam. Fraudsters frequently impersonate the United States Postal Service (USPS) in an attempt to steal personal and financial information. These messages often look convincing, especially during busy shopping seasons or holidays when many people are expecting deliveries.

By understanding how these scams work and recognizing the warning signs, you can better protect yourself, your personal information, and your finances.

What is a USPS Delivery Scam?

USPS delivery scams are a form of phishing, where criminals send fake text messages or emails pretending to be from the United States Postal Service. The message usually claims there is a problem with a package delivery and encourages you to click a link to resolve the issue.

Common claims include:

• Your package couldn’t be delivered because of an incorrect address
• You need to reschedule a delivery
• A small shipping or customs fee must be paid before delivery
• Your package is being held until you confirm your information
• A delivery attempt was missed and immediate action is required

The goal is to create a sense of urgency so you’ll act without thinking. Once you click the link, you’re often taken to a website that closely resembles the official USPS website. The fake site may ask for your name, address, phone number, login credentials, credit card information, or other sensitive details. In some cases, clicking the link may even install malicious software on your device.

Why These Scams Work

Package delivery scams have become increasingly common because they take advantage of everyday situations. With online shopping more popular than ever, it’s normal to receive shipping notifications from retailers and delivery services.

Scammers know that many people are expecting packages and may not think twice before opening a text that appears to come from USPS. They often send thousands of messages at once, hoping enough recipients are waiting for a delivery.

Even if you aren’t expecting a package, curiosity alone may be enough to convince someone to click the link.

Example of the Scam

Ethan receives a text message claiming to be from USPS, notifying him of a missed package delivery. The message states that his package will be returned to the sender unless he reschedules delivery within 24 hours. It includes a link that appears legitimate at first glance.

Wanting to avoid losing his package, Ethan clicks the link. The website looks nearly identical to the official USPS site and asks him to confirm his address, phone number, and a small delivery fee using his debit card. Within hours, scammers use the information he provided to make unauthorized purchases and attempt to access additional accounts tied to his personal information.

Unfortunately, by the time Ethan realizes the message was fake, the scammers already have valuable information that could be used for identity theft and financial fraud.

Warning Signs of a USPS Scam

Knowing what to look for can help you avoid becoming a victim. Be cautious if you notice any of these red flags:

• Unexpected messages. You receive a delivery notification when you aren’t expecting a package.
• Urgent language. The message pressures you to act immediately or threatens that your package will be returned or destroyed.
• Suspicious links. The web address doesn’t end up in usps.com or contains unusual characters, numbers, or misspellings.
• Requests for payment. The message asks you to pay a small fee before your package can be delivered.
• Requests for personal information. Legitimate delivery companies will not ask for sensitive personal or financial information through unsolicited text messages or emails.
• Poor grammar or spelling. Many phishing messages contain awkward wording or obvious mistakes.

Tips for Protecting Yourself

Taking a few simple precautions can greatly reduce your risk of falling for a delivery scam.

• Verify the source. USPS rarely contacts customers by unsolicited text or email unless you’ve signed up for tracking notifications. Visit the official USPS website or use the USPS mobile app to check your package status.
• Don’t click suspicious links. Instead of tapping the link in a message, type the official USPS website address directly into your browser.
• Track packages through trusted retailers. If you ordered something online, log in to the retailer’s website or app to view your shipping information.
• Be skeptical of urgent requests. Scammers often rely on panic and fear to get victims to act quickly.
• Inspect website addresses carefully. Fake websites may look legitimate but often have slightly altered URLs.
• Never provide personal or financial information. USPS will never ask for your Social Security number, online banking credentials, or payment information through unsolicited text messages or emails.
• Keep your devices updated. Regular software updates help protect your phone, tablet, and computer from known security vulnerabilities.
• Use strong passwords and multifactor authentication (MFA). These security measures make it much harder for criminals to access your accounts, even if they obtain some of your information.

What to Do If You’ve Been Scammed

If you think you’ve clicked a fraudulent link or shared personal information, act as quickly as possible.

• Contact us immediately. If your Minster Bank account information, debit card, or online banking credentials may have been compromised, notify us right away so we can help secure your accounts and discuss next steps.
• Report the scam. File a report with the Federal Trade Commission at ReportFraud.ftc.gov. You can also report USPS-related phishing messages to the U.S. Postal Inspection Service by forwarding suspicious texts or emails to spam@uspis.gov.
• Change your passwords. If you entered passwords on a fraudulent website, update them immediately. Use unique passwords for every account and create passwords that are at least 12 characters long using a combination of uppercase and lowercase letters, numbers, and special characters.
• Enable multifactor authentication (MFA). Turn on MFA for your email, financial accounts, and other important online services whenever it’s available.
• Monitor your financial accounts. Review your bank and credit card statements frequently for unauthorized transactions and report anything suspicious immediately.
• Watch your credit. Check your credit reports with Equifax, Experian, and TransUnion for unfamiliar accounts or inquiries. Consider placing a fraud alert or credit freeze if your personal information has been compromised.
• Stay alert for follow-up scams. Once scammers know you’ve responded, they may attempt to contact you again pretending to be your bank, USPS, or even law enforcement. Always verify who you’re speaking with before providing any information.

Stay One Step Ahead of Scammers

Scammers are constantly finding new ways to impersonate trusted organizations, but a healthy dose of skepticism can go a long way. Before clicking a link or providing personal information, take a moment to verify the message through official channels.

When in doubt, contact the USPS directly or contact us. Taking a few extra minutes to confirm a message is legitimate could save you from identity theft, financial loss, and countless hours spent recovering compromised accounts.