Scams going around · Text messages

USPS package delivery text scam

Pretends to be the U.S. Postal Service (USPS). A text that looks like it's from USPS says there's a problem with your package. It might be a missed delivery, unpaid postage or details you need to update. Its link leads to a fake page that asks for your card number and other personal information.

An example of what it can look like

Not a real message: the details are made up.

(202) 555-0147
USPS: Your package is on hold because the address information is incomplete. Please update your address and pay the redelivery fee within 12 hours, or your package will be returned to the sender: https://usps-redelivery-update.example

How to tell

You never signed up for text updates from USPS.
It has a link. Real USPS tracking texts never contain a link.
It came from a regular phone number or an email address. USPS sends its texts from a short 5-digit number.
The text, or the page its link opens, asks for money or for your card number, Social Security number or date of birth.
It's an email about a missed delivery that asks you to pay or give personal information. USPS says its officials would never contact you to ask for money or personal information.

What to do

Don't tap the link or reply.
Expecting a package? Type USPS.com into your web browser yourself, or look up the order on the store's own website or app.
Want to report it to spam@uspis.gov? Do that first, while you still have the text. The steps are below.
Next, use your phone's option to report junk or spam. If it doesn't have one, forward the text to 7726. Then delete the text.
See if your phone has a setting that filters texts from unknown senders, and turn it on.

If you already tapped, paid, called or replied

Call your bank or card company right away, even if you never pressed "submit." Use the number on the back of your card.
If you paid, ask your bank or card company to refund your money.
If you typed a password, make a new one for that account. Change it anywhere else you use the same password, too.
If someone has used your Social Security number, report it at IdentityTheft.gov. If it hasn't been used, or you aren't sure, go to IdentityTheft.gov/databreach.
Email spam@uspis.gov and say whether you tapped the link, lost money or gave information.

How to check for real

Type USPS.com into your web browser yourself. Enter the tracking number from your order. Or check the order on the store's own website or app. USPS sends tracking texts only to people who signed up for them, and those texts don't contain a link.

Where to report it

Email spam@uspis.gov before you delete the text. Without tapping the link, copy the text's words into the email. Add your name and a screenshot (a picture of your screen) showing the sender's number and the date. Say whether you tapped the link, paid or gave information.
After that, use your phone's option to report junk or spam. If it doesn't have one, forward the text to 7726.
Got it by email instead? Forward the email to spam@uspis.gov, then delete it.
Report it to the Federal Trade Commission (FTC) at ReportFraud.ftc.gov.

Free guides that go with this

Check a message you got, free · Check a link

Where this comes from

Written from these official warnings, checked 2026-09-25. Lantern is not part of any organization named on this page.