Scam library · Texts · Delivery
USPS package redelivery text scam
The message says your package is held at a warehouse because the address is incomplete, and you have 12 or 24 hours to update it, sometimes for a small redelivery fee.
It's one of the most common text scams in the U.S. The goal is your card number, home address and sometimes a code that lets the scammer add your card to their phone.
What the message looks like
From: unknown-sender@icloud-mail[.]com
USPS: Your package is on hold at our warehouse because the address is incomplete. Please update within 12 hours or it will be returned to sender:
usps-redelivery-help[.]com/update
(Reply Y and reopen the message to activate the link.)
How this scam works
The Postal Inspection Service says USPS won't send you a text or email unless you asked for tracking updates for a specific package, and those messages don't include links. A text you didn't sign up for, with a link, is the scam.
Because most of us are waiting for something, the timing often feels right. Scammers count on that, especially around holidays and big sales days.
The fake page copies the USPS look, asks you to 'confirm' your address, then asks for a fee of a dollar or two. Behind the fee is the real prize: a working card, plus personal details they can use for more targeted scams later.
Red flags
- You never signed up for USPS text tracking for this package.
- It came from an email address or random number instead of a USPS short code.
- A deadline in hours, and a threat to return the package.
- A web address that isn't usps.com.
- A small 'redelivery' or 'customs' fee. USPS doesn't charge to fix your address.
How to tell it’s fake
- Open usps.com yourself and enter the tracking number from the store's order email, not from the text.
- Check your order in the store's own app or website. If it says delivered or in transit, the text is fake.
- Look at the sender: real USPS texts come from the short code 28777 only after you opt in.
What to do if you clicked, paid or shared info
Don’t panic, and don’t blame yourself. These scams are built by professionals. Act quickly, one step at a time.
If you clicked a link or called back
- Close the page and don't enter anything. Forward the text to 7726 and to spam@uspis.gov, then delete it.
- Run your phone's software update and avoid installing anything the page asked you to.
If you paid
- Call the number on the back of your card, report the charge and ask for a new card number.
- Ask the bank to remove any phone wallets added that you don't recognize.
If you shared personal info, a password or a code
- If you entered a code that was texted to you, tell your bank now.
- Expect follow-up 'bank' calls or texts using your real name and address. Hang up and call your bank directly.
Where to report and get help (U.S.)
If a message seems legit and you’re still not sure, get a second opinion before you act. Reporting helps stop scammers, even if money can’t be recovered. If you are in danger, call 911.
- Your bank or card issuer
Call the number on the back of your card or on your statement, not one from the message. Ask them to stop or reverse the payment and to watch the account. - Federal Trade Commission (FTC) · ReportFraud.ftc.gov
Report the scam and get a step-by-step recovery plan. - FBI Internet Crime Complaint Center (IC3) · ic3.gov
Report scams that happened online, especially if money was lost. Include phone numbers, websites and payment details. - AARP Fraud Watch Network Helpline · aarp.org helpline
Free, for anyone of any age: trained volunteers help you sort out next steps. 877-908-3360, Monday to Friday, 8 a.m. to 8 p.m. Eastern. - IdentityTheft.gov · IdentityTheft.gov
If you shared your Social Security number or someone opened accounts in your name.
How Gmork Scam Guard would warn you
Scam Guard runs in Chrome and Edge on your computer. If you open a link from a text on your computer, or a delivery email in Gmail, it compares the page with the real USPS site and warns you before you type an address or card. When a delivery message looks legit but something feels off, it gives you the plain steps to check tracking yourself.
Scam Guard can miss things, so the checks above still matter. See what it warns about and what it keeps private.
Questions people ask
- Does USPS send texts about missed deliveries?
- Only if you signed up for text tracking with a tracking number, and those texts don't include links. A text you didn't request is a scam.
- Where do I report fake USPS texts?
- Forward them to 7726 and to spam@uspis.gov. You can also report to ReportFraud.ftc.gov.
- I only typed my address. Is that bad?
- It's not an emergency, but it confirms your number is active and tied to a real address. Be extra wary of follow-up calls or texts that use your details.