28777 text message: who sends it?

Check that you asked USPS to text this tracking number.

USPS Text Tracking is opt-in. The message should connect to a tracking request you made, such as texting a tracking number to 28777 or signing up for updates on a package.

Look for one USPS tracking number in the message body.

Real 28777 traffic is parcel-specific. It does not talk about every package in your name, a locked USPS account, or a general delivery profile.

Read the status words as package movement, not a bill.

Genuine updates use plain delivery language, such as delivered, out for delivery, available for pickup, arrival, or notice left. The job is to tell you what happened to that item.

Use 28777 for Text Tracking commands, not payments.

USPS documents 28777, also written as 2USPS, for package tracking by text. That program is not a checkout lane for postage, redelivery charges, customs fees, or identity upload forms.

Send STOP to 28777 only when you want USPS tracking texts canceled.

A real program accepts opt-out commands in its own thread. If a later message moves you to another sender or a browser page, that later message is not acting like USPS Text Tracking.

Delete a 28777-style USPS text that contains a link.

USPS says its Text Tracking messages do not contain links. A smishing text may show a sender name that looks like USPS, then push a link to a fake delivery page.

Refuse any redelivery fee demanded by text.

Real 28777 updates report package status. They do not ask for a card to release mail, reschedule delivery, correct postage, or pay a small customs charge before a timer runs out.

Check the sender, not just the USPS words in the body.

A text from a 10-digit number, email-to-text gateway, or chat app is not the 28777 short code. Scammers paste USPS Tracking into the first line because people read the logo and skip the sender.

Treat missing tracking numbers as a hard fail.

USPS Text Tracking is built around a tracking number. A message saying only that your package is delayed, your address is incomplete, or your parcel is held gives you no parcel to verify.

Close any page asking for card details after a package text.

The theft usually starts after the tap. The page asks for a redelivery fee, then captures the full card number, expiration date, CVV, name, address, and sometimes a bank one-time code.

Reject app installs tied to a USPS delivery text.

USPS Text Tracking does not require an APK file, device profile, wallet pass, browser extension, or remote support tool. A package notice that turns into software installation is outside the 28777 program.

Read the domain from right to left before trusting any USPS-looking page.

The real domain must end in usps.com. A link such as usps.com.track-update[.]top or usps-redelivery[.]site is not a USPS domain, even when the first letters say USPS.

Match the tracking number to a package you requested updates for.

If the number is missing, unfamiliar, or not tied to your shipment, do not treat the text as a real 28777 update.

Do not open a link from a USPS tracking text.

USPS says Text Tracking messages do not contain links. If the message asks you to tap for payment, address correction, redelivery, or customs clearance, stop there.

Check the package status using your own tracking record.

Use the number from your receipt, label, shipping email, or order page. Do not use a number or link supplied only by the suspicious text.

Text STOP to 28777 if the real USPS tracking thread is no longer wanted.

Send it only inside the 28777 conversation. Do not reply to lookalike messages from ordinary numbers or email-to-text senders.

Report USPS smishing to spam@uspis.gov.

Include the message text, sender information, and the date you received it. If you have a screenshot, attach it, but do not click the link to collect more proof.

Forward the suspicious text to 7726 before deleting it.

That sends the message to your carrier's spam-reporting system. After forwarding, block the sender and remove the message from your phone.