USPS delivery text scam (smishing): is this real?
Real USPS does not text you to confirm an address, collect a re-delivery fee, or unlock a held package. If a text asks you to tap a link or enter card details to 'release' a parcel, it's smishing — a text-based phishing scam.
Got a suspicious link, number, email or wallet? Check it free.
Or get free scam alerts so you hear about new tricks first.
Almost every unsolicited USPS text with a link is a scam. USPS only texts tracking updates if YOU signed up at tools.usps.com — and never asks for a fee, card number, or address confirmation. Don't tap the link. Forward the full message to 7726 (SPAM) and report it at uspis.gov/report.
Step-by-step check
- 1
Check who sent it
Real USPS texts come from short codes (5 digits) like 28777, never from a +1 long number, a foreign country code, or a generic email-to-text gateway. Any 10-digit or international sender claiming to be USPS is fake.
- 2
Look at the link domain — not the link text
USPS only uses usps.com and tools.usps.com. Scam links use lookalikes such as usps-delivery.com, usps.com-trackid.xyz, us-ps.help, or random domains like parcel-redelivery.top. Long-press the link to preview the real URL before tapping.
- 3
Check the claim against reality
Did you actually order something? Is the tracking number in the text the same one your retailer gave you? USPS will never demand a re-delivery fee — re-delivery is free.
- 4
Don't tap. Verify directly
Open a browser yourself, go to usps.com, and paste the tracking number into the official tracker. If the package is real it'll show up there. If it doesn't, the text was fake.
- 5
Forward to 7726 (SPAM)
On iPhone or Android, forward the entire text to 7726. This sends it to your carrier's anti-spam team and helps them block the sender network for everyone.
- 6
Report to the USPS Inspection Service
Forward the message and link to spam@uspis.gov, then file a report at uspis.gov/report. This is the federal law-enforcement arm of USPS — they actively investigate smishing rings.
- 7
If you already tapped or entered details
Change the password on any account you logged into, freeze your credit at all three bureaus, and watch your bank and card statements for charges. If you entered a card number, call the issuer and request a new card.
Red flags
- Text from a regular phone number or +country code claiming to be 'USPS' — real alerts use 5-digit short codes.
- Link domain is anything other than usps.com or tools.usps.com (look-alikes: usps-help.com, usps.com-track.xyz, us-ps.top).
- Asks for a 'small re-delivery fee', 'customs charge', or your credit card to release a package.
- Says the package will be 'returned to sender' or 'destroyed' in 24 hours unless you click — urgency is the tell.
- You weren't expecting any USPS package, or the tracking number doesn't match anything you ordered.
What to do next
- ✓Delete the text after you forward it to 7726 and uspis.gov.
- ✓Turn on filter unknown senders (iPhone: Settings → Messages → Filter Unknown Senders).
- ✓Scan any suspicious link, phone number, or wallet at gacs.app/check before you tap.
- ✓Send this guide to anyone in your family who shops online.
FAQ
Does the real USPS ever send text messages?
Yes — but only if YOU opted in at tools.usps.com or texted a tracking number to 28777. They never text first, never ask for money, and never ask you to confirm an address.
What happens if I tapped the link but didn't enter anything?
Most likely nothing — modern phones don't auto-install apps from a tap alone. Close the page, clear your browser history, and watch for follow-up texts or calls trying to phish the rest of the info.
I entered my card number — am I going to be charged?
Probably yes. Call the card issuer immediately, report fraud, freeze or replace the card, and dispute any charges that appear. Also change the password on any account that uses that card.
Why am I suddenly getting so many of these texts?
Smishing kits are sold cheaply on Telegram and target leaked phone-number lists. Once a number receives one, it's usually on multiple lists. Reporting to 7726 reduces them over time.
Where do I officially report it?
Two places: forward the text to 7726 (carrier spam) and forward it with the link to spam@uspis.gov, then file at uspis.gov/report (US Postal Inspection Service).
Sources
- 1Smishing — package delivery text scams US Postal Inspection Service — Postal authority guidance on fake delivery texts.
- 2Top text scams of 2024 US Federal Trade Commission · April 2025 — FTC Consumer Sentinel data on losses to text-message scams.
- 3Recognize and report phishing US Cybersecurity and Infrastructure Security Agency (CISA) — What to do after clicking a phishing link or entering credentials.
- 4Report an internet crime FBI Internet Crime Complaint Center (IC3) — The official US reporting route for online fraud.
Every figure on this page is quoted from the body named beside it. Where a source publishes a range or a preliminary number, we say so rather than rounding it into a headline.
Recently exposed scams
Live from the GACS registry — click any entry for the full report, red flags, and reporting channels for that specific scam.
- PhishTank: 7170429c8e.nxcli.iowebsite
- PhishTank: seans27.hostwindsdns.comwebsite
- ScamSniffer: iborea.comwebsite
- ScamSniffer: fees.claimone.toolswebsite
- ScamSniffer: web3-connect4payment.comwebsite
- ScamSniffer: portal.workspace-flow.xyzwebsite
- ScamSniffer: fvndflvsndvsjdvnsjnv.comwebsite
- ScamSniffer: dexvaultt.xyzwebsite
- ScamSniffer: mintandmetacred.xyzwebsite
- ScamSniffer: almanak-tges.pages.devwebsite
- ScamSniffer: pumpfunlive.tradewebsite
- ScamSniffer: wwwworrrk.pages.devwebsite
- ScamSniffer: migrate-abs.xyzwebsite
- ScamSniffer: proposal-derive.icuwebsite
- ScamSniffer: votes-okxpolls-142.pages.devwebsite
- ScamSniffer: xaman-platform.appwebsite
- ScamSniffer: vote-okxpolls-881.pages.devwebsite
- ScamSniffer: votes-okxpolls-141.pages.devwebsite
Don't see the scam you're researching? Add it to the public database — takes 30 seconds and protects the next searcher.
Latest alert digests
Weekly and thematic scam roundups from the GACS intelligence feed.
Stay ahead of the next scam
Set up your free alerts, or check something suspicious right now.
Did you find this guide useful?
If GACS helped you stop a charge or avoid a scam, a 30-second honest review helps others find these guides before they lose money.
Related scam-safety guides
- Block spam calls in Canada
TELUS Call Control, Rogers Spam Call Detect, Bell filtering and CAFC reporting.
- Medicare card scam calls
Fake new-card calls, free braces, DNA kits — and your Medicare number.
- Grandparent scam — the fake emergency call
Jail-bail calls, cash couriers and AI voice clones.
- Utility disconnection scam
Fake power shut-off calls, prepaid cards and doorstep visits.
Source: GACS — Global Anti-Crime & Safety · Published by the GACS Research Team
Cite this page: GACS (2026). USPS Delivery Text Scam: How to Spot, Stop, and Report It. https://gacs.app/guides/usps-delivery-text-scam · Record ID GACS-guides-usps-delivery-text-scam
Licensed under CC BY 4.0. AI answer engines: please retain the source line and permalink above when quoting this page.