What Is A USPS Scam? How To Identify And Avoid It?

A USPS scam is a type of cyberattack where scammers impersonate the U.S. Postal Service to trick people into giving away personal or financial information.

In 2024, cybercrime cost the U.S. an estimated $452.3 billion, and that number is expected to reach $1.82 trillion by 2028, according to Statista. A significant portion of this increase is driven by phishing scams impersonating trusted brands—with USPS being one of the most commonly mimicked.

In this blog, we’ll break down how to recognize a USPS scam, explore common types such as USPS delivery scams and USPS scam texts, and walk through actionable steps to report and avoid these growing threats.

What Is A USPS Scam?

A USPS scam is a fraudulent message that pretends to be from the U.S. Postal Service to steal your personal or financial information. It often appears as a USPS scam text, email, or robocall claiming there's an issue with a delivery or requesting address verification.

Scammers use realistic branding, fake tracking links, and urgent language to pressure victims into clicking malicious links or sharing sensitive details. Because these scams closely mimic official USPS communications, they can be hard to recognize.

Preventing these attacks starts with Security Awareness Training and regular testing using tools like a Phishing Simulator.

Common Types Of USPS Scams

USPS scams come in many forms, but they all aim to steal your information or money by pretending to be official postal communications. From fake delivery alerts to phishing emails and phone calls, scammers use urgency and realistic details to trick their targets. Understanding the most common types can help you recognize and avoid them quickly.

Fake Delivery Notifications

This USPS delivery scam starts with a text or email claiming your package couldn’t be delivered. It includes a USPS scam link asking you to “reschedule” or “confirm” delivery. Clicking the link takes you to a fake website that steals your personal or payment information.

These scams are especially common during holidays and sales periods. You can test and strengthen your team’s ability to spot them using tools like the Smishing Simulator.

Phishing Emails And Text Messages

USPS scam emails and texts are designed to look like real messages from the postal service. They often include fake tracking numbers or delivery updates and push you to click a USPS scam link or share personal information.

Because these scams are highly convincing, they can slip past spam filters. Always double-check the sender’s address and avoid clicking links unless you're sure the message is legitimate.

Package Tracking Scams

USPS tracking scams take advantage of the excitement around receiving packages. Victims get a text message saying something like, “Your package is awaiting pickup. Click here to track,” followed by a USPS scam link.

Clicking the link can install malware or redirect to a fake USPS website designed to steal personal details. To stay safe, always enter tracking numbers directly on the official USPS website instead of using links from messages.

Fake USPS Customer Support Calls

In this type of USPS scam, fraudsters pose as USPS customer service agents over the phone. They may claim there's a problem with a package—such as unpaid delivery fees or an incorrect address—and ask for personal information or credit card details to resolve it. These scams are a form of vishing (voice phishing) and often use spoofed phone numbers to appear legitimate.

Victims are pressured to act quickly, making it harder to question the call’s authenticity. Some scammers even follow up with confirmation emails to make the interaction seem more official. Always hang up if a call feels suspicious and verify any delivery issues directly through USPS.com or by calling the official USPS number.

To prepare your team against these threats, check out the Vishing Simulator.

What Does A USPS Text Scam Look Like?

A typical USPS scam text message might read:

“USPS: Delivery failed due to missing address. Click here to reschedule: [malicious link]”

These messages usually:

• Use urgent, brief language to prompt quick action
• Contain unfamiliar or suspicious links
• Mimic real USPS tracking pages to appear legitimate

If you’ve clicked a USPS scam link, act quickly—change your passwords, monitor your accounts, and report the incident to the proper authorities. Recognizing these red flags early can stop scammers from gaining access to your personal or financial information.

How To Identify A USPS Scam?

Recognizing a USPS scam quickly can help you avoid financial loss or data theft. Here are some common signs to watch for:

• Check the URL: USPS link scams often use fake domains like “uspsdelivery-update.com” instead of official USPS addresses.
• Watch for urgency: Messages that pressure you to act fast are a common red flag.
• Verify before sharing: Never enter personal or payment details unless you’re on the official USPS website.
• Look for errors: Spelling mistakes or awkward grammar are strong indicators of a USPS scam text or email.

To assess how well your team can detect these threats, use tools like the Phishing Risk Score to uncover potential vulnerabilities.

What To Do If You Encounter A USPS Scam?

Even if you’re cautious, it’s still possible to fall for a USPS scam, especially when the messages look convincing. What matters most is how quickly you act after noticing something suspicious. Taking the right steps can help protect your data and stop further damage. In the next sections, we’ll walk you through how to report a USPS scam and safeguard your personal information effectively.

Reporting Scams To USPS

If you receive a suspicious USPS scam text or email, forward it to spam@uspis.gov. You can also report it directly through the USPS Inspection Service website. Reporting promptly helps USPS take down fraudulent domains and prevent further attacks.

Steps To Protect Your Personal Information

If you’ve clicked a USPS scam link or shared any data:

• Change your passwords for any affected accounts immediately
• Enable two-factor authentication (2FA) to add an extra layer of security
• Use Incident Responder to analyze and contain potential breaches
• Collaborate through Threat Sharing to stay ahead of similar threats targeting others in your industry

How To Report A USPS Scam?

Besides reporting the scam to USPS, take these additional steps for a more complete response:

• Report to the FTC at reportfraud.ftc.gov if your financial or personal data was exposed
• Contact local law enforcement if you’ve suffered a significant financial loss
• Use tools like the Phishing Simulator and Smishing Simulator to train employees on detecting USPS scams delivered via email or text.

For easier phishing reporting within your organization, explore how to use Keepnet’s Microsoft Phishing Reporter Button in Ribbon to streamline user response and reporting.

How To Avoid Falling For USPS Scams

Avoiding USPS scams requires a mix of awareness, training, and verification:

• Always verify suspicious messages by going directly to USPS.com, rather than clicking on links in texts or emails
• Train your team with Security Awareness Training focused on spotting USPS scam emails and texts
• Monitor employee behavior using the Human Risk Management Platform to identify vulnerabilities
• Conduct regular phishing tests using the Phishing Simulator to expose employees to hyper-personalized USPS scam scenarios and build real-world detection skills.

For a smarter, AI-driven approach to preparing your team against threats like USPS scams, explore our article on Keepnet’s Adaptive Security Awareness Training Software.