How to Use the Official USPS Text Message Number and Spot the Smishing Fakes

How to Use the Official USPS Text Message Number and Spot the Smishing Fakes

You’re sitting on your couch, maybe scrolling through your feed or thinking about that pair of boots you ordered three days ago, and suddenly your phone buzzes. It's a text. It says there's a problem with your delivery. A "warehouse issue" or a "missing house number." It feels urgent. You want your boots. But before you tap that blue link, you need to know that the actual usps text message number is a very specific, five-digit short code, and if the message came from a random 10-digit phone number or an email address, you’re likely being hunted by a scammer.

Smishing—that’s SMS phishing—is exploding. In 2024 and 2025, the Postal Inspection Service saw a massive spike in these fraudulent texts. The scammers are clever. They use logos that look real. They use language that sounds official. But the United States Postal Service doesn't just text you out of the blue because they "lost your address." They already have your address; that’s how the package got into the system in the first place.

The Real USPS Text Message Number You Can Trust

Let's get the facts straight immediately so you don't have to guess. The official USPS short code for tracking updates is 28777.

That is it. Five digits. 2-8-7-7-7.

If you get a text from a number that looks like a normal cell phone—something with an area code like 555-123-4567—it isn't the Post Office. Period. USPS doesn't send tracking updates from 10-digit long codes. They also don't send them from Hotmail or Gmail accounts. When you sign up for alerts, the messages will always come from that five-digit short code.

How do you even get these texts? You have to ask for them. USPS operates on an "opt-in" basis. You go to the official website, enter your tracking number, and click "Text & Email Updates." You choose what you want to see—delivery confirmation, delays, or when it's out for delivery. Only after you do that will 28777 start talking to you. If you didn't ask for a text, any message claiming to be from USPS is a red flag big enough to cover a mail truck.

Why the "Redelivery" Scam Works So Well

Scammers are psychologists. They know we’re all addicted to online shopping. They know that at any given moment, about 60% of households are expecting a package.

They send out millions of "blast" texts. They don't know who you are. They just know that if they send 10,000 texts saying "Your package is held at our warehouse," at least a few hundred people will actually be waiting for a package and think, "Oh no, is that mine?" It’s a numbers game.

🔗 Read more: Why Browns Ferry Nuclear Station is Still the Workhorse of the South

The link in those fake texts usually goes to a "cloned" website. It looks exactly like USPS.com. It asks for your "redelivery fee," usually something tiny like $1.99. You think, It’s only two bucks, I’ll just pay it to get my boots. But they don't want the two dollars. They want the credit card number, the CVV, and your billing address. Once you hit submit, they have everything they need to go on a spree.

Spotting the "Tell" in the Text

Honestly, most of these texts are full of typos if you look closely enough. They might say "U.S.P.S" with weird periods, or use phrases like "Action Required Promptly." Real USPS automated messages are dry. They are boring. They usually just give you the tracking number and the status. They don't use high-pressure emotional language.

Another huge giveaway? The link. A real USPS link will always point to usps.com. Scammers use things like "https://www.google.com/search?q=usps-delivery-update.com" or "check-package-here.xyz." If the URL looks like an alphabet soup of random letters, stay away.

Interacting with 28777

If you are using the legitimate usps text message number, you actually have some power. You can text that short code to get info without even going to the website.

Let's say you have a tracking number: 9400 1000 0000 0000 0000 00. You can text that number directly to 28777. The system will kick back the latest status. It’s fast. It’s clean. No links to click, no credit card info requested.

You can also use keywords. If you want to stop getting alerts, you just text STOP to 28777. If you need a list of what you can do, text HELP. This is standard short-code behavior mandated by wireless carriers. Scammers usually won't respond to "STOP" because their numbers are spoofed or burner lines.

What to Do If You Clicked

It happens. You were tired, you were waiting for a birthday gift for your kid, and you clicked.

💡 You might also like: Why Amazon Checkout Not Working Today Is Driving Everyone Crazy

If you just clicked the link but didn't enter any info, you’re probably okay, but your IP address is now marked as "active" in the scammer's database. Expect more spam. If you entered your credit card info? Call your bank right now. Don't wait. Tell them you were targeted by a smishing scam. They’ll kill the card and send you a new one.

You should also report it. The USPS has a specific email for this: spam@uspis.gov.

Take a screenshot of the text. Don't just delete it yet. Send that screenshot to the email above. This helps the Postal Inspection Service track where these campaigns are originating. You can also forward the text to 7726 (which spells "SPAM" on most keypads). This alerts your cell phone provider so they can block that sender across their entire network.

The Informed Delivery Alternative

If you really want to be safe and never worry about the usps text message number again, sign up for Informed Delivery.

This is a free service where USPS takes a literal picture of the mail arriving at your house. Every morning, you get an email with grayscale images of your letters and a list of any packages arriving that day. It lives behind a secure login. If a package is coming, it shows up in your dashboard. If you get a text about a package that isn't in your Informed Delivery dashboard, you know for a fact it's a scam.

Understanding the Limits of Tracking

Tracking isn't perfect. Sometimes a package sits in a sorting facility in Jersey City for three days without moving. It's frustrating. But remember: USPS will never ask you for money to "unstick" a package via text.

Fees like "customs duties" or "re-routing charges" are handled through official channels. If you owe money on a package (Postage Due), the mail carrier will usually leave a paper form (PS Form 3849) at your door. They won't send a text with a link to a payment processor.

📖 Related: What Cloaking Actually Is and Why Google Still Hates It

Real World Example: The "Incomplete Address" Trick

A common scam text currently circulating says: "The USPS package has arrived at the warehouse but cannot be delivered due to incomplete address information. Please confirm your address in the link."

Think about this logically. If the address was "incomplete," how did the package get to the warehouse? If the zip code was right, they have your local post office. If the street was wrong, they wouldn't have your phone number to tell you about it unless you specifically signed up for alerts for that specific tracking number. It's a logical loop that falls apart under any real scrutiny.

How to Stay Safe Long-Term

The best way to handle your mail is to be proactive.

  1. Bookmark the official site: Only go to USPS.com by typing it into your browser.
  2. Never click the link: Even if you think it's real, go to the official site and paste the tracking number yourself.
  3. Save the short code: Put 28777 in your contacts as "USPS Tracking." That way, if a text comes in from a different number, your phone won't label it as "USPS," and you'll immediately see the discrepancy.
  4. Use a Password Manager: They won't auto-fill your credentials on a fake site. If your manager doesn't recognize the URL, it's a huge warning sign.

The postal system is a massive, old-school infrastructure trying to live in a digital world. It’s a target because it’s universal. Everyone uses it. By knowing that the usps text message number is strictly 28777, you effectively eliminate 99% of the risk associated with these scams.

Stay skeptical. If a text feels "urgent" or "threatening," it's almost certainly a lie. The post office is many things, but they are rarely "urgent" in their texting style. They’ve been delivering mail since 1775; they can wait for you to log into the official portal to check your status.

Actionable Steps for Today

  • Open your phone and add 28777 to your contacts.
  • Go to the USPS website and sign up for Informed Delivery if you haven't yet.
  • Delete any old text threads from random numbers claiming to be delivery services.
  • Check your bank statement if you've recently paid a "redelivery fee" under $3.00.

Taking these steps turns you from a potential victim into a hard target. Scammers want the easy win. If you don't give it to them, they'll move on to someone else who hasn't learned the difference between a real short code and a fake long-code trap.