Safe to Tap

Is it really them?

Is this message really from USPS?

Updated November 3, 2026

Scammers pretend to be USPS because so many people use it. Here's what the real USPS does, what the fakes look like, and how to check a message yourself.

USPS's real websites

• usps.com

A link can include "usps" and still not be theirs: look at what comes right before the first single "/". In usps.secure-check.example/login, the website is secure-check.example.

What the real USPS does

• USPS texts you only after you've asked for tracking updates with a tracking number, and those texts don't contain links.
• USPS doesn't ask for a fee to redeliver a package by text.

Fakes going around

• "Your package is on hold" or "incomplete address" texts with a link.
• A small fee to "release" or redeliver a package.
• Links with "usps" in them that aren't usps.com.

How to check

• Track packages yourself in the USPS app or on usps.com with the tracking number from your order.
• Forward the text to 7726 (SPAM) and email a copy to spam@uspis.gov.
• More in our alert: Package delivery texts.

Sources

• U.S. Postal Inspection Service: Smishing, package tracking text scams