You’re probably expecting a package right now. Most of us are. It’s that chaotic time of year when the doorbell rings more than the phone, and our porches are buried under cardboard boxes. Scammers know this. They're counting on it, actually.
The U.S. Postal Service (USPS) just put out a massive red alert. They're seeing a huge spike in what’s called "smishing"—essentially phishing, but through your text messages. It’s sneaky, it’s fast, and honestly, it’s ruining a lot of people's holidays.
USPS Warns of Smishing Scams During the Holidays: The Setup
The "smish" usually starts with a buzz in your pocket. You look down and see a text that looks official. It might say something like, "Your USPS package has arrived at our warehouse and cannot be delivered due to incomplete address information." Or maybe it’s a warning about "unpaid delivery fees" that need to be settled within 24 hours.
They want you to panic. They want you to think your kid's big present is sitting in a cold warehouse because of a typo.
But here is the thing: The USPS does not send unsolicited texts. If you didn’t sign up for a specific tracking notification for a specific number, any text you get from "the post office" is a lie. Period. These criminals are after your PII (Personally Identifiable Information). They want your credit card numbers, your Social Security digits, and your login credentials. Once you click that link, you're usually sent to a "look-alike" website that looks exactly like the real USPS.com, but it's a digital trap.
✨ Don't miss: Ukraine War Map May 2025: Why the Frontlines Aren't Moving Like You Think
The Tell-Tale Signs of a Holiday Scam
Scammers are getting better at the graphics, but they’re still kinda sloppy with the details. Look for these red flags:
- Weird Links: Real USPS links don't look like "https://www.google.com/search?q=uspis-package-update.com" or some random string of gibberish.
- Urgency: If the text says you only have 3 hours to "verify your address" or the package gets sent back, it's fake.
- Requests for Money: USPS doesn’t charge you a "redelivery fee" via text. If they need money, they'll leave a physical slip at your door.
- Sender Number: Most official USPS texts come from a 5-digit short code, not a random 10-digit mobile number.
Honestly, the easiest rule to follow is this: if there's a link in the text, don't touch it.
Why the Holidays Make This Worse
Everything is faster in December. We’re distracted. We’re stressed. When we see a "delivery failure" notice, our brains jump to "fix it" mode instead of "is this a scam?" mode.
Sherry Patterson, a USPS communications specialist, recently highlighted that these crimes are part of a broader uptick in mail-related fraud. It’s not just your phone, either. The Postal Inspection Service is also tracking "brushing" scams—where you get a random package you never ordered—and "quishing," which uses fake QR codes to steal your data.
🔗 Read more: Percentage of Women That Voted for Trump: What Really Happened
The USPS has even ramped up their "Project Safe Delivery" initiative. They've hiked rewards for information on mail theft and carrier robberies to as high as $150,000. It's a serious time for mail security, both physical and digital.
How to Protect Your Information
If you’re worried about a real package, don't use the link in the text. Open your browser. Type in USPS.com yourself. Paste your tracking number there. If there’s a real problem, the official site will tell you.
You can also sign up for Informed Delivery. It's a free service that sends you a daily email with grayscale images of the mail arriving at your house and tracking updates for your packages. It’s a great way to know exactly what’s coming without ever needing to click a suspicious link in a text.
Another pro tip? Filter your messages. Most iPhones and Androids have a setting to "Filter Unknown Senders." It shoves texts from numbers you don't know into a separate tab so you aren't constantly bombarded by "delivery alerts" while you're trying to have dinner.
💡 You might also like: What Category Was Harvey? The Surprising Truth Behind the Number
What to Do if You Already Clicked
It happens. If you clicked the link or, worse, entered your card info, you need to move fast.
- Call your bank. Tell them you might have been a victim of a smishing scam. They can freeze your card and watch for weird charges.
- Report it to USPS. Copy the text (don't click the link!) and email it to spam@uspis.gov.
- Forward to 7726. This is the universal "SPAM" reporting number for cell carriers. It helps them block the scammer's number for everyone else.
- Change passwords. If you entered a password on a fake site, change it on the real site immediately—and anywhere else you use that same password.
The holiday season is meant for family and relaxing, not for dealing with identity theft. Stay skeptical of your inbox and your text notifications. If a message feels "off," it probably is. Keep your personal info as guarded as you keep the presents under your tree.
Check your tracking numbers directly on the official USPS website and stay vigilant against these evolving digital threats.
Next Steps for Safety:
- Sign up for Informed Delivery on the official USPS website to track packages securely.
- Enable Multi-Factor Authentication (MFA) on your banking and retail accounts to add a layer of protection.
- Save 7726 in your contacts as "Report Spam" so you can easily forward suspicious texts.