The fake USPS delivery notification is now the most reported smishing scam in the United States, according to the FTC. Millions of Americans receive one every day — and they work because almost everyone is expecting a package at any given time.
If you or your parent received a text about a package that couldn't be delivered, this guide will help you determine whether it's real or a scam.
What a fake USPS text looks like
These messages typically say something like:
- "USPS: Your package has been held. Confirm your address to reschedule delivery: [link]"
- "USPS shipment #9261190100830… requires updated delivery information. Visit: [link]"
- "Your USPS package is waiting. A $0.30 redelivery fee is required: [link]"
The small fee is intentional — $0.30 or $1.99 feels trivial, which lowers your guard. But the goal isn't the fee. It's getting your payment card number, which they'll then charge repeatedly or sell.
How to tell if a USPS text is real
There are three reliable ways to check:
1. Check the link domain
Real USPS messages only link to usps.com. Any variation — usps-tracking.net, usps-delivery.com, usps-package.info, us-postal.com — is a scam. Scammers register dozens of USPS-lookalike domains specifically to fool people.
Before clicking any link, press and hold it (on mobile) to see the full URL. If it's not usps.com, don't click.
2. Look up your tracking number independently
If the text includes a tracking number, go directly to usps.com (type it yourself, don't use the link) and enter the number there. If the package exists, it will show up. If it doesn't, the text is fake.
3. Check whether you're actually expecting a package
USPS only sends delivery notifications if you signed up for Informed Delivery or if a specific package has tracking enabled. If you're not expecting anything and didn't sign up for notifications, any "delivery" text is almost certainly a scam.
What USPS will never do by text
- Ask for payment to redeliver a package
- Ask you to confirm personal information
- Ask for your Social Security number or bank details
- Threaten to return your package if you don't click immediately
I already clicked the link — what now?
Don't panic, but act fast:
- If you only clicked but didn't enter anything: Close the page. Run a quick malware scan on your device. You're likely fine — most harm happens when personal or payment information is entered.
- If you entered your card number: Call your bank immediately using the number on the back of your card. Ask them to cancel the card and dispute any charges. Do this within the hour if possible.
- If you entered your name, address, or email: Be alert for follow-up phishing emails and targeted scam calls in the coming weeks. Scammers sell verified contact information to other scammers.
- If you entered your Social Security number: Place a credit freeze at all three bureaus (Equifax, Experian, TransUnion) immediately. This prevents new accounts from being opened in your name.
Why elderly parents are especially at risk
The fake USPS text works particularly well on seniors because:
- They're more likely to be home and waiting for deliveries
- They may not know that a $0.30 fee is a red flag rather than a reassurance
- Urgency ("your package will be returned") creates pressure to act before thinking
Watchover lets your parent forward any suspicious text and get an instant verdict. If they forward a fake USPS text, Watchover will flag it immediately and tell them not to click — in seconds, without needing to call you.