What is ‘smishing’? USPS warns of package tracking text scam

On By Littum

Customers must request package tracking text messages from the United States Postal Service. USPS does not send messages without a request first.

game

The holiday season is the time to give, but unfortunately, some believe it is the time to steal.

The US Postal Inspection Service reminds customers of the importance of avoiding trending scams while sending and receiving gifts this year. Perhaps one of the most popular scams is “smishing,” which, in the case of holiday mail, appears as fake text messages indicating package tracking. Secret texts with dubious tracking information and clickable links should be avoided to prevent fraudsters from obtaining personal information.

Never heard of smishing? Here’s what you need to know about the fraudulent activity, how to prevent it, and what real tracking messages look like from the US Postal Service.

Deadlines for sending your parcels: Shipping schedules for USPS, FedEx and UPS holiday gifts

What is smishing?

Smishing is a form of phishing, the fraudulent practice of sending messages disguised as a reputable source to get individuals to reveal personal and/or financial information, such as social security numbers, credit and debit card numbers, and account passwords.

Smishing, specifically, is done through text messages.

A victim of smishing typically receives a deceptive text message from a scammer who tries to act as a government agency, bank, or other institution, such as the USPS.

What your wallet means: Sign up for USA TODAY’s Daily Money newsletter.

Does the USPS send tracking text messages?

Yes, the USPS offers SMS package tracking, but customers must register to start it. The USPS does not send tracking texts or emails without a customer first requesting the service US Postal Inspection Service states.

What does a package tracking text from USPS look like?

Depending on the information requested, USPS tracking texts may vary, but generally all texts contain the following:

  • Tracking number
  • Package status
  • Date, time and place
  • Instructions to stop receiving further messages

Per it USPSan example text message for an expected delivery might look like: USPS 01123456789123456789, Expected Delivery by: Monday, September 11, 2017 Reply STOP to cancel.

USPS tracking texts never include clickable links.

How do you request text tracking from USPS?

People can request SMS tracking by sending their package’s tracking number to 28777 (2USPS). The text response will be the package’s latest tracking update.

People looking for more specific tracking information should text the package’s tracking number to 28777 in addition to a USPS keyword. Keywords tell the USPS what information a person is looking for, such as expected delivery, when and where a package is available for pickup, and any past activity related to the package.

A list of keywords is available on the USPS website at usps.com/text-tracking/welcome.htm.

What should you do if you receive a smishing message?

If you believe you have received a deceptive message from a sender masquerading as the USPS, report the message by email to [email protected]. Complete the following steps to file a report:

  • Without clicking the link, copy the body of the message and paste into a new email.
  • Attach a screenshot of the text message showing the sender’s phone number and the date the message was sent.
  • Include your first and last name in the email.
  • Include other relevant details. For example, if you clicked on the link and provided personal or financial information or lost money, you must share that information.
  • Forward the SMS to 7726 (SPAM).

The US Postal Inspection Service will contact you if additional information is needed.

If you receive a smishing message unrelated to the USPS, forward the message to 7726 and submit a report to Federal Trade Commission or the FBI Internet Crime Complaint Center.

Other forms of mail fraud to be aware of during the holidays

Brushing is another type of scam that scammers can use during the holiday season.

Brushing is when a person receives a package that contains items that were not ordered or requested by the recipient. Although the package may be addressed to the recipient, the package often does not contain a return address. The purpose of brushing is to give the idea that the recipient is a verified buyer who has written positive reviews online. Therefore, the scammer writes fake reviews in your name. Fake reviews help increase product sales.

While brushing may look like a victimless crime, the reality is that the recipient’s personal information may have been stolen. And a fake review can encourage others to buy items that aren’t worthy of a glowing review.

If you think you may be a victim of brushing, there are several steps you can take. If you haven’t opened the package, write “RETURN TO SENDER” on the box and USPS will take care of it at no charge. You can also throw the package away, or if you like what’s inside, you can keep it. It is legal to store unsolicited goods.

But perhaps most importantly, change your account passwords, closely monitor accounts for unexpected activity, and notify authorities.

Greta Cross is a national trends reporter at USA TODAY. Follow her on X and Instagram @gretalcross. Story idea? Email her at [email protected].