A text buzzes in. A parcel cannot be delivered, it says, until you confirm your address. It reads like a small logistics hiccup. It is often the first move in smishing, which is phishing carried out by text message.
Red flag one: a text you never asked for that wants a reply now
The United States Postal Inspection Service says an unsolicited text with an unfamiliar link, claiming a USPS delivery needs a response, is a scam. The agency calls it smishing. The aim is to lure you into handing over personal or financial information.
The test is simple. Did you ask for this? According to the Postal Inspection Service, USPS will not text or email you about a package unless you first requested tracking with a tracking number. A message that shows up out of nowhere breaks that rule.
Pressure is part of the design. The Better Business Bureau notes that scammers count on busy people acting before they think. Typical lines say a package is on hold, the address is incomplete, or a signature is needed. Any of these is a reason to slow down, not speed up.
Red flag two: a link, a call-back number, or an odd instruction
The link is where the harm happens. Per the BBB, tapping one can lead to a fake site that steals personal information or money, or it can download malware onto your device. USPS states that its tracking messages will not contain a link at all.
Some scams skip the link and ask you to call. The BBB describes fake delivery driver texts that invite a call, and once you phone, the person asks for personal details, including card information. Another reported tactic asks you to reply with a certain character so the link will work. That is a trick, and the BBB lists it as a scam tactic.
If you really are expecting a parcel, do not use anything in the message. Open your browser and type the carrier's address yourself. The Postal Inspection Service advises visiting the USPS website from your mobile device instead of following a link. The FTC gives similar advice: check that you are on a genuine government (.gov) site before sharing sensitive information.
Red flag three: a request for money or personal details
Real tracking costs nothing. USPS says its package tracking tools are free and that it does not charge for them. So a text asking you to pay to release, reschedule, or view a delivery is suspect from the start.
The sums can look tiny on purpose. The BBB reports a scam that asked for a $1.99 "delivery tax" paid by credit card. It also describes a "pay the delivery charges" claim tied to a supposed check. A small amount feels harmless, and that is the point. The card number is what the scammer wants.
The Postal Inspection Service lists what criminals are after: account usernames and passwords, Social Security numbers, dates of birth, card numbers, and PINs. That data feeds other crimes such as financial fraud. No delivery notice needs any of it.
A note left on your door can be part of the same scheme. The BBB lists a door note asking you to call a number to reschedule as a red flag. Treat it the way you would treat the text.
Red flag four: it looks official and sounds professional
Scammers often pose as a government agency, a bank, or a well-known company. The Postal Inspection Service says so directly. Because USPS is a government service, a message carrying its name can lower your guard.
Polish proves nothing. The BBB warns that official-looking logos and professional language do not show a message is genuine. It also notes that a caller can be friendly and professional and still be running a scam. The FTC adds that scam texts can look like official messages.
The sources reviewed here do not explain how to tell whether a text is spoofed, so treat the sender name and number as unproven. Use contact details you found yourself, such as the carrier's own website, to check whether a delivery is real.
Questions to ask before you act, and what to do next
A few seconds with a short checklist can head off a costly mistake. Ask yourself:
- Did I request tracking for this specific package, and did I give a tracking number to USPS?
- Does the message contain a link, a call-back number, or a request for payment?
- Am I being pressured to act quickly?
If the answers point the wrong way, do not click, call, or reply. If you are expecting a parcel, check it through the carrier's site, typed in by hand. Your retailer's order page is another place to look.
Reporting helps too. The FTC publishes a guide, How to Recognize and Report Spam Text Messages, and its consumer alert on scam texts that claim to be from USPS covers this exact scheme. The Postal Inspection Service guidance on smishing also advises reporting suspicious messages.
Some questions remain open in the sources. They do not lay out step-by-step reporting beyond general advice. They also do not say what to do if you already clicked a link or shared information, such as how to protect accounts or get identity theft help. They do not cover the financial consequences of a loss or the protections that may apply to card or bank fraud. If that has happened to you, look for current guidance from official consumer protection agencies or speak with a qualified legal or financial professional. This article is for general education only and is not legal, financial, or credit repair advice.
