One of the most prevalent scams this holiday season is a phishing scam with text messages made to look like they’re coming from delivery services such as the U.S. Postal Service (USPS).
Consumers may receive a text or email saying a delivery can’t be made, along with a link to reschedule the delivery. However, clicking the link could lead to a site that attempts to steal personal information or download malware.
From the USPS website:
Have you received unsolicited mobile text messages with an unfamiliar or strange web link that indicates a USPS delivery requires a response from you? If you never signed up for a USPS tracking request for a specific package, then don’t click the link! This type of text message is a scam called smishing.
Smishing is a form of phishing that involves a text message or phone number. Victims will typically receive a deceptive text message that is intended to lure the recipient into providing their personal or financial information. These scammers often attempt to disguise themselves as a government agency, bank, or other company to lend legitimacy to their claims. USPS utilizes the 5-digit short codes to send and receive SMS to and from mobile phones.
The criminals want to receive personally identifiable information (PII) about the victim such as: account usernames and passwords, Social Security number, date of birth, credit and debit card numbers, personal identification numbers (PINs), or other sensitive information. This information is used to carry out other crimes, such as financial fraud.
The Postal Service offers free tools to track specific packages, but customers are required to either register online, or initiate a text message, and provide a tracking number. USPS does not charge for these services! USPS will not send customers text messages or e-mails without a customer first requesting the service with a tracking number, and it will NOT contain a link. So, if you did not initiate the tracking request for a specific package directly from USPS and it contains a link: don’t click the link!
If you suspect the text message you have received is suspicious but are expecting a parcel, please do not click on any links. Rather, report it and visit USPS.com from your mobile device or computer for tracking and additional resources.
Barry Moore with the Central Virginia Better Business Bureau (BBB) said he and his wife have received these scam messages. He advises that people should not click on any suspicious links.
“We got a text last night, my wife and I, saying, ‘Come down to the package room, you’ve got a gift,’” Moore said. “And I was like, don’t open it. Don’t respond, because it was a scam. It was phishing, trying to get her to engage.”
Another scam that the IRS expects to intensify soon involves emails pretending to be from the agency, claiming there’s good news like a tax refund or stating that a tax bill is available for download. The IRS also warns against clicking on these links.
The BBB also advises against paying for goods or services using Bitcoin or gift cards. Moore says bank and credit card companies are the safest options for payment.
- Search at landfill for missing Conrad woman
- The 'frozen' Montana housing market
- Great Falls house destroyed by fire
- Montana may soon have a new state park
"We had a local lady two weeks ago, and they tried to get $22,000 from her," Moore said. “She didn’t have [the money], but she went to the bank, and she didn't have a lot of money in it. The bank said, 'No, you better be careful.' She didn't listen to him. She was on the phone with the scammers, and they sent her to the other bank. She told them how much money she had in that bank. They said, get that money out right now, and go buy Bitcoin. And she never heard from them again, and she's now wiped out. It breaks your heart."
If you fall victim to a scam, the BBB says you are not a victim — you are a survivor.
The BBB offers a free survivor’s kit online, which can help individuals restore their credit and learn how to report scams and fraud.
