What is “Smishing”? USPS warns about text fraud in package tracking

The holidays are a time for giving, but unfortunately some believe it is a time for stealing.

The U.S. Postal Inspection Service is reminding customers of the importance of avoiding popular scams when sending and receiving gifts this year. Perhaps one of the most popular scams is “smishing,” which involves fraudulent text messages in holiday mail that indicate package tracking. Unpublished texts with questionable tracking information and clickable links should be avoided to prevent fraudsters from obtaining personal information.

Never heard of smishing? Here’s what you should know about the fraudulent act, how to prevent it, and what real U.S. Postal Service tracking messages look like.

Deadlines for sending your packages:Holiday gift shipping schedules from USPS, FedEx and UPS

What is smishing?

Smishing is a form of phishing, the fraudulent practice of sending messages under the guise of a legitimate source to trick individuals into disclosing personal and/or financial information such as Social Security numbers, credit and debit card numbers, and account passwords.

Holiday offers: Shop this season’s top products and special offers, curated by our editors.

Specifically, smishing occurs via text messages.

A smishing victim typically receives a fraudulent text message from a scammer attempting to impersonate a government agency, bank, or other institution such as the USPS.

What your wallet means: Sign up for USA TODAY’s Daily Money newsletter.

Does the USPS send tracking text messages?

Yes, the USPS offers tracking packages via SMS, but customers must register to start this. According to the US Postal Inspection Service, USPS does not send tracking texts or emails without a customer first requesting the service.

What does a USPS package tracking text look like?

Depending on the information requested, USPS tracking texts may vary, but generally all texts include the following:

Tracking number
Package status
Date, time and location
Instructions to stop receiving further messages

According to the USPS, a sample expected delivery text message might look like this: USPS 01123456789123456789, Expected delivery by: Monday, September 11, 2017. Reply to cancel.

USPS tracking texts never contain clickable links.

How do you request text tracking from the USPS?

People can request tracking via SMS by sending their package’s tracking number to 28777 (2USPS). The text response is the latest tracking update of the package.

Individuals requiring more specific tracking information should text the package’s tracking number to 28777 in addition to one of the USPS keywords. Keywords tell the USPS what information a person is looking for, such as expected delivery, when and where a package is available for pickup, and any past activity related to the package.

For a list of keywords, visit the USPS website at usps.com/text-tracking/welcome.htm.

What should you do if you receive a smishing message?

If you believe you have received a fraudulent message from a sender disguised as USPS, report the message via email spam@uspis.gov. Complete the following steps to submit a report:

Copy and paste the message body into a new email without clicking the link.
Attach a screenshot of the text message that shows the sender’s phone number and the date the message was sent.
Include your first and last name in the email.
Provide any other relevant details. For example, if you clicked on the link and provided personal or financial information or lost money, share those details.
Forward the text message 7726 (SPAM).

The US Postal Inspection Service will contact you if further information is needed.

If you receive a smishing message that has nothing to do with the USPS, forward the message to 7726 and file a report with the Federal Trade Commission or the FBI’s Internet Crime Complaint Center.

Other Types of Email Scams to Be Aware of During the Holidays

Brushing is another type of scam that scammers can use during the holidays.

When brushing, a person receives a package containing items that the recipient did not order or request. While the package may be addressed to the recipient, the package often does not contain a return address. The brushing is intended to give the impression that the recipient is a verified buyer who has written positive reviews online. Therefore, the scammer writes fake reviews in your name. Fake reviews help boost product sales.

While brushing your teeth may seem like a victimless crime, in reality the recipient’s personal information may have been stolen. And a fake review can trick others into purchasing items that aren’t worthy of a glowing review.

If you think you’re falling victim to brushing your teeth, there are several steps you can take. If you have not opened the package, write “RETURN TO SENDER” on the package and the USPS will take care of it free of charge. You can also throw away the packaging or, if you like the contents, keep it. It is legal to keep unwanted goods.

But perhaps most importantly, change your account passwords, monitor accounts closely for unexpected activity, and notify authorities.

Greta Cross is a national trends reporter for USA TODAY. Follow her on X and Instagram @gretalcross. Story idea? Email her at gcross@gannett.com.

Related Posts

Leonard Williams and Jarran Reed lead the Seahawks’ win over the Bears with seven sacks

Which Rutgers players will miss Rate Bowl vs. Kansas State?

Women’s Soccer: Lackey Tabbed Freshmen First Team All-American

Leave a Reply Cancel reply