Information Security Brief - May 2025

Think that text message is from USPS? It could be a scam

Have you ever gotten a text message about a package coming via the United States Postal Service? Maybe it confirmed your order, said a package is out for delivery, or said there's a problem like unpaid postage, a missed delivery, or you need to update your shipping preferences. That text message will say to click a link to learn more or fix the problem. But there's a good chance that text message that says it's from USPS (or FedEx…or DHL…) is really from a scammer.

Scammers want you to click the link in their message. What happens next is the scam: the click takes you to a look-alike of a real website where they'll tell you to enter personal or financial information. It will go straight to the scammer if you pay that money, along with your credit card number, name, address, and anything else you entered.

To avoid this scam:

• Verify delivery information independently. If you think a text is about a real delivery, don't give information or click on any links in the message. Instead, go to the online retail site or account from which you ordered your item to look up your package's shipping and tracking information.
• Use filters. See what options your mobile phone has to filter and block texts from unknown senders.
• Report unwanted text messages and scams on the messaging app you use. See if your phone has an option to report junk or spam. If not, forward the message to 7726.

Check out these resources to help you weed out spam text messages, phishing emails, and unwanted calls. Spotted a scam? Tell the FTC at ReportFraud.ftc.gov.

https://consumer.ftc.gov/consumer-alerts/2025/04/think-text-message-usps-it-could-be-scam?utm_source=govdelivery