Phishing

We all rely on the USPS to deliver our mail and packages, but scammers are exploiting that trust with a devious new trick: the USPS text scam, also known as “smishing.” This isn’t just another annoying robocall; it’s a carefully crafted attempt to steal your personal information and leave you vulnerable to identity theft.

Image Source: Reddit

How the Scam Works:

Imagine this: You receive a text message that appears to be from the United States Postal Service. It might say something like:

  • “Your package delivery has been delayed due to an unpaid shipping fee. Click here to resolve.”
  • “We were unable to deliver your package. Please call this number to reschedule.”
  • “Your package is being held at our facility. Verify your address to avoid return to sender.”

These messages often use urgent language to create a sense of panic. They want you to act quickly without thinking. The key element is a link or a phone number. Clicking the link takes you to a fake website that looks convincingly like the real USPS site, where you’re asked to enter sensitive information. Calling the number connects you to a scammer posing as a USPS representative.

The Danger Lurking Behind the Link:

The goal of these scams is simple: to trick you into handing over your personal and financial data. This could include:

  • Account usernames and passwords
  • Social Security numbers
  • Dates of birth
  • Credit and debit card numbers

With this information, scammers can wreak havoc on your finances and your identity.

How to Protect Yourself:

The good news is, you can easily protect yourself by remembering these crucial points:

  • USPS Doesn’t Initiate Contact via Text or Email (Unless You Specifically Request It): The USPS will not send you unsolicited text messages or emails. The only exception is if you’ve signed up for tracking updates using a specific tracking number.

  • USPS Messages Never Contain Links: Legitimate USPS communications will never include clickable links. This is a huge red flag.

  • Be Wary of Urgent Language: Scammers use urgency to pressure you. Take a moment to think before you act.

What to Do If You Receive a Suspicious Text:

  • DO NOT click on any links.
  • DO NOT call any numbers provided in the text.
  • Delete the message immediately.
  • Report the scam: You can report the message to the USPS Inspection Service (www.uspis.gov) or the Federal Trade Commission (FTC) at ReportFraud.ftc.gov.

Stay Vigilant, Stay Safe:

By staying informed and following these simple tips, you can protect yourself from the latest USPS text scam and avoid becoming a victim of identity theft. Don’t let scammers ruin your day – be smart and stay safe!

Even the most vigilant among us can fall victim to a well-crafted phishing email. These deceptive messages often appear to be from legitimate sources, like the Social Security Administration (SSA), and can trick you into revealing personal information or clicking on malicious links.

But don’t worry, ExchangeDefender is here to help! Here’s what you need to do if you receive a suspicious email claiming to be from the SSA:

1. Stop. Don’t Respond.

Resist the urge to reply or click on any links within the email. Phishing emails often contain malware disguised as links or attachments. Clicking on them could infect your device with viruses or spyware.

2. Report It. There are two ways to report a phishing Social Security email:

  • The SSA OIG Fraud Hotline: Call 1-800-269-0271 to report the scam directly to the SSA’s Office of the Inspector General.
  • The SSA OIG Online Reporting Form: Submit a detailed report online at https://oig.ssa.gov/report/.

3. Report It (Again!)

Most email providers offer tools to report spam and phishing emails. Forward the suspicious email to your provider’s designated reporting address. This helps them identify and block similar scams in the future.

4. Be Vigilant. Check Your Accounts.

Following a phishing attempt, it’s crucial to monitor your Social Security account and bank statements for any unusual activity. If you notice unauthorized transactions or changes to your accounts, contact the relevant institutions immediately.

5. Stay Educated, Stay Safe.

Knowledge is power! Educate yourself and others about the tactics used in phishing scams. There are numerous online resources that can help you distinguish legitimate emails from fraudulent ones.


Here at ExchangeDefender, we prioritize your online security. Our comprehensive email security solutions can help your business:

  • Identify and block phishing attempts before they reach your inbox.
  • Encrypt your email communication to ensure data remains confidential.
  • Prevent malware attacks by automatically detecting and removing malicious attachments.

Don’t let email threats disrupt your business. Contact ExchangeDefender today to learn how we can keep your data safe and your operations running smoothly!