What it looks like
USPS: Your package could not be delivered due to an incomplete address. Please update within 24 hours: https://usps.redelivery-track.top/us
Other forms it takes
USPS: Your package is at our warehouse. A redelivery fee of $0.30 is due. Pay now to schedule delivery: https://usps-redeliver.example-post.top
USPS: We could not deliver your parcel. Confirm your debit card details to release it: https://usps-parcel-help.example-post.top
Email: “Missed delivery attempt. Click here to reschedule, or your item will be returned to the sender in 48 hours.”
How the scam plays out
- A text says a package can’t be delivered: a missing address, unpaid postage or a missed delivery.
- It tells you to tap a link, and may warn that the package goes back to the sender if you wait.
- The link opens a look-alike USPS site that captures everything you type.
- It asks for your name and address, then your card for a small fee, or your debit card “to release” the package.
- The link can also put harmful software on your phone that steals your information.
Signs it’s a scam
- You never asked USPS for text updates.
- A link that isn’t usps.com.
- A small “redelivery fee” or a request to confirm your card.
What to do
- Don’t tap the link.
- Track packages by typing usps.com yourself.
- Forward the text to 7726 and to spam@uspis.gov.
How to check if it’s real
- Track packages by typing usps.com yourself, or check the site where you ordered.
- Expecting a package? Still don’t tap the link. Report the text, then check usps.com on your own.
- USPS only texts or emails you if you asked for tracking updates with a tracking number, and those messages don’t contain links. USPS says it uses 5-digit short codes for its texts.
- The real USPS will never demand payment to redeliver a package.
Already clicked, paid or shared something?
- Call your card company or bank right away, using the number on your card. Report the charge and ask them to reverse it.
- Watch your statements for new charges, even small ones, and dispute them.
- Paid with a debit card? Report any charge you didn’t make as soon as you see it. Federal rules expect you to report within 60 days after the statement showing it was sent, or you could owe for later charges.
- Gave your Social Security number or other personal details? Visit IdentityTheft.gov for a step-by-step recovery plan.
- Tapped the link? Keep your phone and its apps up to date, and change any password you typed on the fake site.
- When you email spam@uspis.gov, say whether you clicked the link, lost money or gave personal information.
Where to report it
- Email the text to the Postal Inspection Service (spam@uspis.gov) with your name and a screenshot
- Report a mail-related crime (USPIS)
- Report it to the FTC
Related scams
- “Unpaid toll” text: is it a scam?
- Apple Pay scams: how to tell a fake Apple message
- Is this PayPal email a scam?
- Make a family safe word