Is that "USPS package on hold" text a scam?
Example text message
USPS: Your package is on hold. Confirm your address and a $1.99 fee here: usps-redelivery.icu
SCAM
Yes. The Postal Service does not text you out of the blue: USPS tracking is something you have to sign up for first, using the tracking number of a parcel you already know about. It also sends from five-digit short codes, not from a mobile number or an email address. A delivery text you did not ask for, from a number that looks like a phone, is smishing aimed at your card.
How to spot the USPS scam
- You never signed up for tracking on this parcel. USPS says plainly that its tracking tools require you to request updates first, so an unrequested notification is the whole tell.
- It came from a 10-digit mobile number or an email address. USPS uses five-digit short codes for its text messages.
- There is a fee to release the package: redelivery, customs, unpaid postage. A small amount is chosen to be worth paying rather than worth querying.
- The link is not usps.com. Endings like .icu, .shop, .top and .vip are cheap to register in bulk, which is why these campaigns keep using them.
- It wants more than a payment. These pages harvest names, addresses, dates of birth, card numbers and PINs, because the card is only the first crime.
- There is a deadline: final notice, action required today, returned to sender by morning.
- You are not expecting a parcel at all, or you cannot match it to an order.
What to do now
- Do not tap the link. If you think a delivery is real, go to the retailer you actually ordered from and use the tracking number in your order confirmation.
- Check tracking only at usps.com or in the official USPS app, typed or bookmarked, never reached from the message.
- Report it. USPS asks for smishing to be forwarded to spam@uspis.gov, and forwarding to 7726 (SPAM) lets your carrier act on the sender. Then delete it.
- If you entered card details, ring your bank now, dispute the charge and freeze the card.
- If you gave up a date of birth or Social Security number as well, treat it as identity theft and follow the recovery steps at IdentityTheft.gov.
What it looks like on your phone
Got a message like this? Check yours free
Paste any text, link, or number you are unsure about. Bewary gives you a straight answer in seconds, and the exact reason why.
Checked
You're out of free checksYou have used your 2 free checks this month. Get Bewary Web for 100 checks a month, plus email and phone leak monitoring.
Get Bewary Web, $19.99/yr Private. Never sold, never tied to you.
Sources and reporting
Use official channels to confirm a suspicious request and report fraud.