“This is the post office. Your package has been temporarily held. Please check the link for your zip code within 24 hours.” This message is a smishing scam text message impersonating the United States Postal Service (USPS) that a Korean resident received. As we approach the end of the year, scams impersonating the USPS through text messages have been on the rise recently, and residents are urged to be especially careful. Scammers are using a method of sending text messages containing links with content about problems related to mail or package delivery, targeting personal financial information.
As online shopping for gifts increases ahead of Christmas, smishing scams impersonating the USPS from unknown phone numbers are becoming more frequent. These scams induce people to enter personal or financial information. According to the US Postal Inspection Service, scammers typically impersonate government agencies, banks, or well-known companies, requesting sensitive personal information such as names, card information, Social Security Numbers (SSNs), and driver’s license numbers. The information gathered in this manner is often manipulated, sold, or used for further scams.
The Federal Communications Commission (FCC) has strongly warned, “If you receive a text message from an unknown number or a suspicious message from an organization that you have not registered for text notifications, it is very likely a scam.” When a package is sent or an item ordered is delivered via USPS, a tracking number is included on the receipt. This tracking number can be used to check the delivery status on the USPS website or by text message, but USPS generally does not send text messages asking for a direct response from the user. USPS urges caution, stating, “Unless a customer has registered a USPS tracking request for a specific piece of mail, you will not receive a USPS-related text message.”
Korean American Cho Mo received this type of scam text message and almost fell victim to it. Cho shared, “I was waiting for the items I ordered to send gifts to my friends at the end of the year when I received a text message from the post office saying there was a delivery problem.” Cho added, “I immediately deleted the text message because it asked for personal information, but if I had not been more careful, I almost entered my personal information.”
The FBI emphasized that companies and organizations rarely ask users directly for their username and password. To avoid smishing scams, the FBI warns that if you receive a suspicious text message, do not click on any links, respond, or attempt to call. Do not reply at all, even if there is an option to reply with “STOP.” The FBI also recommends deleting suspicious text messages immediately and checking the receipt or the company/organization’s website for a customer service number or email to confirm that the message is genuinely from the company or organization.
Additionally, the FBI suggests using multi-factor authentication to access sensitive information such as bank accounts, health records, and social media accounts. This provides an extra layer of protection for personal data. If you have been a victim of a mail-related smishing scam, the FBI urges you to report it to spam@usps.gov. When reporting, please include a screenshot of the suspicious text message, the sender’s phone number, the date it was sent, and details such as whether you clicked on any links, responded to the message, or if any personal information was affected by the scam.
