Essential Guide: Protecting Yourself from USPS Text Message Scams in 2024

Understanding Smishing: The Text Message Threat

What is Smishing?

Smishing, a portmanteau of “SMS” (short message service) and “phishing,” refers to the fraudulent practice of sending text messages purporting to be from reputable sources.

The goal is to deceive individuals into revealing sensitive information such as personal, financial, or security details.

It’s essentially phishing but conducted through text messages instead of emails.

Impersonating Legitimate Organizations

Scammers often disguise themselves as trusted entities like banks, government agencies, or delivery services to trick recipients into believing the communication is genuine.

In the case of the USPS, fraudsters send texts that appear to update you on your package status but are designed to steal your personal information.

These messages may mimic legitimate notifications and can include commands to click on a malicious link, provide personal details, or call a particular phone number.

Increased Prevalence During Holiday Seasons

The holiday season is a prime time for smishing scams.

Why? Because it’s the period when online shopping—and consequently package deliveries—skyrocket.

People are eager to track their gifts and are more likely to fall for text messages claiming to be from shipping companies like the USPS.

The heightened urgency and high volume of deliveries provide an ideal cover for scammers to send fraudulent texts that prey on your anticipation and busy schedule.

Remember, legitimate tracking texts from the USPS are only sent upon your request, always contain specific tracking details, and never include clickable links.

If you ever find yourself questioning the legitimacy of a message, report it immediately to USPS warns about package tracking ‘smishing’ text messages.

By understanding the threat of smishing, you can better identify and avoid falling victim to these malicious schemes.

Know the threats

Legitimate USPS Text Messages: What to Expect

When you receive a text message from the USPS, it’s crucial to know what distinguishes a real message from a potential scam.

The USPS only sends tracking texts upon your request, ensuring that any unsolicited text claiming to be from USPS is likely fraudulent.

Key Components of Genuine USPS Texts

A legitimate USPS tracking text includes several specific pieces of information:

• 📱 Tracking Number: Each text will feature the unique tracking number for your package.
• 📱Package Status: You’ll see the current status of your shipment.
• 📱 Date and Time: The text will include the date and time of the last update.
• 📱 Location: It will also provide the location of the package at the time of the update.
• 📱 Instructions to Stop Messages: The message will clearly state how to opt out of further messages.

For example, a proper USPS text might look like this: “USPS 01123456789123456789, Expected Delivery by: Monday, September 11, 2017. Reply STOP to cancel.”

No Clickable Links

Legitimate USPS text messages never include clickable links.

This is a key safety feature designed to protect customers from fraudulent websites and phishing attempts.

If you receive a text with any clickable links claiming to be from USPS, it should raise immediate suspicion.

Transition to Enhanced Package Security

Understanding what genuine communications from USPS look like is your first line of defense.

Stay alert and report any suspicious messages to ensure you’re protected from scams.

Up next, we’ll discuss how you can distinguish and report suspicious messages effectively.

How to Set Up Official USPS Text Tracking

USPS offers customers a convenient way to track their packages through text messages, but it’s essential to know what steps to take to ensure your tracking updates are legitimate.

Setting up official USPS text tracking is straightforward and effectively keeps you informed about your package’s status without the worry of falling for scams.

Requesting USPS Text Tracking

To receive tracking updates via text message, follow these simple steps:

1. Text Your Tracking Number: Send your package’s tracking number to 28777 (2USPS). This will initiate the tracking service, and you’ll start receiving text updates about your package.
2. Keywords for Specific Information: In addition to your tracking number, you can send specific keywords to 28777 to get more detailed information. Keywords include:
   • “Expected”: To know the expected delivery date.
   • “Update”: To receive the latest tracking update.
   • “Date”: For the date the package was shipped.
   • “Stop”: To stop receiving text messages about that package.

Understanding the USPS Keywords

Here are some of the useful keywords and their functionality to help you get the information you need:

• “ALL”: Provides all available information on your package, including every scan event.
• “EX”: Indicates the expected delivery date.
• “UPDATE”: Sends the most current tracking status.
• “STOP”: Opt-out of tracking messages for a specific package.

This systematic approach ensures you get the precise information required without unnecessary alerts.

Opting Out of USPS Text Tracking

If, for any reason, you want to stop receiving tracking updates, you can easily opt-out:

• Reply STOP: Simply reply with the word “STOP” to any tracking message received. This command will halt any further updates for that specific package.

What to Expect

Legitimate USPS text messages include only essential information:

• 📱 Tracking number
• 📱 Package status
• 📱 Expected delivery date/time
• 📱 Location updates

Notably, genuine USPS texts never contain clickable links. If a text claims to be from USPS and includes a link, it’s a red flag for smishing.

By setting up text tracking correctly and recognizing the components of a legitimate USPS message, you can safeguard against smishing scams and stay informed about your deliveries.

Stay vigilant and report any suspicious text messages promptly.

Identifying and Reporting Suspicious Messages

While understanding legitimate USPS text messages is crucial, knowing how to spot and report potential smishing attempts is equally important.

Here’s what you need to keep an eye out for, and how you can take action if you encounter suspicious messages.

Recognizing Red Flags

Identifying suspicious messages early can prevent scams and protect your personal information.

Here are common red flags to watch for:

• 📱 Unexpected messages: If you receive a tracking text from USPS when you didn’t request it, be cautious.
• 📱 Clickable links: Legitimate USPS texts will never contain clickable links. Any link in a supposed USPS message is a major red flag.
• 📱 Errors in text: Poor grammar, misspellings, and unusual formatting are often signs of fraudulent texts.
• 📱 Sense of urgency: Messages that encourage quick action or contain threats if you don’t respond immediately can be indicative of a scam.
• 📱 Request for personal information: USPS will never ask for sensitive information like social security numbers or passwords via text.

Reporting a Smishing Attempt

If you suspect a message might be a smishing attempt, it’s critical to report it to the appropriate authorities.

Here’s how:

1. Do not click any links: This could lead to malware installation or phishing websites.
2. Copy the message: Copy the body of the text message, avoiding links, into a new email.
3. Attach a screenshot: Capture a screenshot of the message showing the sender’s phone number and the date it was sent.
4. Include your details: Add your first and last name and any relevant details, such as whether you clicked the link or shared any personal information.
5. Email the report: Send the email to [email protected].
6. Forward the message: Also, forward the suspicious text to 7726 (SPAM).

Following these steps ensures the appropriate authorities can investigate the matter and potentially prevent future scams.

Final Thoughts

By staying vigilant and knowing what to look for, you can avoid falling victim to smishing scams.

Always be cautious with unsolicited requests and follow the steps outlined to report suspicious messages accurately.

Being aware of smishing and other delivery scams, like brushing, is crucial in maintaining your security.

Stay tuned to learn more about these additional threats and how you can protect yourself from them.

Additional Package Delivery Scams: Brushing

Understanding Brushing Scam Tactics and Unsolicited Packages

Brushing is a relatively new scam tactic where fraudulent merchants send unsolicited packages to boost their online ratings.

The scam works as follows: scammers obtain your personal information, such as your name and address, and use it to send packages containing items you did not order.

The goal here is to falsely associate your name with a “verified” purchase, allowing them to write positive reviews on your behalf.

What makes brushing particularly insidious is that it often involves legitimate products, which can lull recipients into a false sense of security.

These packages might contain anything from inexpensive trinkets to more valuable items, yet the real harm lies beneath the surface.

Potential Risks to Personal Information

Receiving an unsolicited package might initially seem harmless—or even a pleasant surprise.

However, the reality is that brushing scams pose significant risks to your personal information.

Here’s why:

• 📱 Data Breach: The mere fact that scammers have your address and other personal details suggests that this information may have been obtained through breaches or unauthorized means.
• 📱 Identity Theft: If your data is compromised, it can potentially be used for identity theft, creating financial havoc.
• 📱 Security Risks: Continuous unauthorized use of your details can compromise your overall security, making you a targeted individual for further scams.

How to Handle Unexpected Packages and Protect Yourself

If you receive a package you didn’t order, it’s important to handle it properly to mitigate any potential risks:

1. Do Not Open: Resist the temptation to open the package. Instead, write “RETURN TO SENDER” on the box and either take it to your local post office or leave it for your mail carrier to pick up the next day.
2. Change Passwords: Immediately update passwords to your email, online stores, and any other accounts that might be vulnerable.
3. Monitor Accounts: Keep a close eye on your financial statements, credit reports, and online accounts for any unauthorized activity.
4. Report the Incident: Notify the postal authorities and other relevant platforms where you suspect your information has been used. Reporting helps in tracking down fraudulent activities and preventing future brushing attempts.

Recognizing and addressing brushing scams is essential in maintaining your personal security and preventing further exploitation.

Staying vigilant can protect not only your information but also lower the encouragement for such deceitful practices to persist.

Preventive Measures and Best Practices

Combating smishing and package delivery scams involves proactive measures and best practices to ensure your personal information remains secure.

Here’s what you can do:

Regular Monitoring of Accounts for Suspicious Activity

Regularly checking your financial and online accounts helps you spot unauthorized activities quickly.

Look out for:

• 📱 Unfamiliar transactions
• 📱 Unexpected emails confirming purchases or account changes
• 📱 Alerts or notifications about logins from unknown devices

Setting up account alerts can help you stay on top of any suspicious movements.

Maintaining Strong Password Security

Strong, unique passwords are your first line of defense. Ensure your passwords are:

• 📱 Long (at least 12 characters)
• 📱 A mixture of letters (both uppercase and lowercase), numbers, and special characters
• 📱 Different for each account

Consider using a password manager to generate and store complex passwords securely.

Steps to Take if Personal Information is Compromised

If you suspect that your personal information has been compromised through a smishing scam or brushing tactic:

1. Change Your Passwords: Immediately update your passwords for all online accounts, prioritizing those linked to financial institutions.
2. Enable Two-Factor Authentication: Add an extra layer of security to your accounts by enabling two-factor authentication (2FA) wherever possible.
3. Monitor Your Credit Reports: Review your credit reports regularly for any unauthorized accounts or activities. You can request a free report from each of the three major credit bureaus annually.
4. Report Fraudulent Activity: Contact your bank or financial institution to report any suspicious transactions and potentially freeze your accounts to prevent further unauthorized access.
5. Stay Informed: Educate yourself on the latest scams and security practices to guard against future threats.

By staying vigilant and proactive, you can protect your personal data and maintain your online security.