You’re waiting for a package. Your phone buzzes. It’s a text from USPS saying there’s a delivery problem.
You need to click a link to fix it. Right now.
But wait. That text isn’t from USPS. It’s a scam.
And if you click that link, you could lose a lot more than your package.
This is called smishing. It’s phishing by text message. And it’s become one of the most dangerous scams targeting Americans today. The U.S. Postal Inspection Service has issued multiple warnings about these fraudulent messages. They’re everywhere. Your mom probably got one. Your neighbor definitely did. Maybe you’ve gotten three this week alone.
Here’s what you need to know.
What Is Smishing and Why Should You Care?

Smishing combines SMS (text messages) with phishing. Scammers send texts that look like they’re from trusted sources. Banks. Government agencies. And yes, USPS.
The goal? Get you to click a link. Once you do, they’re in.
According to the Federal Trade Commission, these messages often claim there’s a problem with your delivery. Maybe unpaid postage. Perhaps a missed delivery. Maybe your shipping preferences need updating.
The text will include a link. Don’t click it.
USPS warns of smishing scams using text messages with links because scammers know people trust the postal service. They exploit that trust. And it works.
In 2025, Google even filed a lawsuit against a cybercriminal group behind massive smishing operations. This group, largely based in China, has victimized over a million people across 120 countries. They use fake USPS messages, E-ZPass alerts, and other trusted brands to steal personal data.
The scam is simple but effective. The link in the text takes you to a fake website that looks real. It asks for your Social Security number, bank details, passwords, and more. If you enter that information, it goes straight to the scammers.
Scam calls and texts are everywhere these days. But smishing is particularly sneaky because texts feel more personal than emails.
How to Spot a Fake USPS Text Message
Real USPS texts exist. But only if you sign up for them.
USPS offers free tracking services. You can get text updates. But you have to request them first. And here’s the key: those messages will never include a clickable link asking for personal information.
If you didn’t sign up for USPS text tracking, that message isn’t real.
Look for these red flags:
- Strange phone numbers that don’t look legitimate
- Urgent language demanding immediate action
- Links to websites that aren’t USPS.com
- Requests for personal information
- Grammar errors or odd phrasing
The U.S. Postal Service uses 5-digit short codes to send SMS messages. If the text comes from a regular phone number or a weird combination of numbers and letters, it’s fake.
Scammers want you to panic. They create urgency. “Your package will be returned!” “You owe $3.99!” “Confirm your address now!”
Take a breath. Real USPS communications don’t work that way.
If you’re expecting a package and want to check on it, go directly to USPS.com. Don’t use any links from the text. Type the website into your browser yourself.
You can also use Social Catfish’s reverse phone lookup service to verify if a suspicious number is legitimate. It’s a quick way to check if that text is really from USPS or just another scammer trying to steal your personal information.
USPS Warns of Smishing Scams Using Text Messages with Links: What Scammers Want
They want your personally identifiable information (PII). That’s the technical term.
In plain English: they want everything.
Your Social Security number. Date of birth. Credit card numbers. Bank account details. Usernames. Passwords. PINs.
With that information, scammers can drain your bank account. Open credit cards in your name. Steal your identity. Ruin your credit score.
Some victims don’t realize they’ve been scammed until months later. By then, the damage is done.
The criminals behind these schemes often operate overseas. They use sophisticated tools to create realistic-looking websites. One group uses a platform called “Lighthouse” that generates templates mimicking USPS, banks, and other trusted brands.
These aren’t amateur operations. This is organized crime. And it’s a billion-dollar industry.
According to the FTC, Americans lose billions of dollars to fraud each year. In 2022 alone, roughly $8.8 billion was stolen.
Smishing is part of that.
The good news? You can protect yourself. But you need to know what to look for. And you need to act fast when you spot a scam.
If you’ve received suspicious messages, you might also be targeted by no caller ID calls or other phone scams. These tactics often work together.
What to Do If You Get a Smishing Text
First: don’t click anything. Don’t reply. Don’t call any numbers in the message.
Here’s what to do instead:
- Take a screenshot of the text. Make sure it shows the sender’s phone number and the date.
- Forward the text to 7726 (SPAM). This helps your carrier identify and block scam numbers.
- Report it to USPS. Email [email protected] with your screenshot and any relevant details.
- Block the sender on your phone.
- Delete the message.
If you already clicked the link, don’t panic. But act quickly.
- Contact your bank and credit card companies immediately. Tell them what happened. They can monitor your accounts for fraud.
- Change your passwords. All of them. Use strong, unique passwords for each account.
- Check your credit report for suspicious activity.
- Consider placing a fraud alert on your credit file.
The Postal Inspection Service takes these scams seriously. They investigate. They work with law enforcement. But they need your help to track down the scammers.
Social Catfish can also help. Our tools let you verify phone numbers, investigate suspicious contacts, and protect yourself from online scams. We’ve helped thousands of people avoid fraud and identify scammers before it’s too late.
If you’re dealing with multiple suspicious messages or calls, check out our guide on mitigating spam calls.
USPS Warns of Smishing Scams Using Text Messages with Links: Other Delivery Scams to Watch Out For
Smishing isn’t the only delivery scam out there.
“Brushing” is another. Scammers send you packages you didn’t order. Then they post fake reviews using your name. Weird, right? It’s about boosting product ratings on sites like Amazon.
There’s also straight-up phishing via email. Same concept as smishing, but through your inbox instead of texts.
And don’t forget about “vishing.” That’s phishing by phone call. Scammers call pretending to be USPS, FedEx, or DHL. They say there’s a problem with your package and you need to provide information to fix it.
Here’s the pattern: scammers always create urgency. They want you to act before you think.
Slow down. Verify. Don’t trust caller ID. Scammers can fake that too.
According to security experts, scammers frequently change their tactics. The messages evolve. But the red flags stay the same: urgency, suspicious links, and requests for personal information.
If you want to stay ahead of scammers, Social Catfish offers comprehensive tools to investigate suspicious contacts, verify identities, and protect yourself online. We specialize in uncovering the truth behind fake profiles and fraudulent communications.
How to Protect Yourself Moving Forward

Prevention is easier than recovery.
Here’s how to protect yourself:
Use USPS’s legitimate services. Sign up for Informed Delivery on the official USPS website. This sends you emails showing what mail and packages are coming. No sketchy links required.
Filter unknown texts. Most phones let you block messages from unknown senders. iPhone users can go to Settings > Messages and toggle on “Filter Unknown Senders.” Android users can block unknown callers in their messaging app settings.
Don’t save personal info on your phone. If your phone gets hacked, scammers can access everything.
Update your phone’s security software. Keep everything current.
Be skeptical. If a message seems urgent or too good to be true, it probably is.
Check your phone bill regularly. Watch for unauthorized charges.
Educate your family. Older adults and young people are particularly vulnerable to these scams. Make sure they know what to watch for.
Think of your personal information like cash. You wouldn’t hand money to a stranger on the street. Don’t hand your data to a suspicious text.
Why Social Catfish Is Your Best Defense
USPS warns of smishing scams using text messages with links, but warnings aren’t always enough. You need tools.
That’s where Social Catfish comes in.
We help you investigate suspicious phone numbers, emails, and online profiles. Our reverse lookup services can tell you who’s really behind that text message. Is it USPS? Or is it a scammer halfway across the world?
Our platform includes:
- Reverse phone lookup to identify unknown numbers
- Reverse email search to verify sender identities
- Reverse image search to check if profile pictures are stolen
- Tools to uncover hidden social media accounts linked to suspicious contacts
We’ve been helping people stay safe online for years. We know how scammers operate. We know their tactics. And we know how to stop them.
Don’t wait until you’re a victim. Be proactive. Use Social Catfish to verify contacts before you engage. Check that phone number. Look up that email. Make sure you’re talking to who you think you’re talking to.
Because in 2025, you can’t be too careful.
Stay One Step Ahead
Smishing scams aren’t going away. They’re getting more sophisticated. More convincing. More dangerous.
But you don’t have to be a victim.
Stay informed. Stay skeptical. And use the right tools.
USPS warns of smishing scams using text messages with links for a reason. These scams work. They trick smart people every day.
Don’t let yourself be next.
Verify before you click. Question before you share. And when in doubt, use Social Catfish to investigate.
Your identity is worth protecting. Your money is worth protecting. And in a world full of scammers pretending to be USPS, having the right protection isn’t optional.
It’s essential.







