That Text About a Package Is Probably Not From the Post Office

Last year Americans reported losing $470 million to text message scams. That is five times what it was in 2020, and the most common one of all is a fake message about a package delivery, usually pretending to be from the U.S. Postal Service.

You have probably seen one already. It says a package could not be delivered, or a small fee is owed, and there is a link to fix it. The fake bank version works the same way. It says there is a suspicious charge on your account and asks you to tap a link or call a number to stop it. Lately there is also one about an unpaid highway toll. Different costumes, same trick.

Here is what all of them have in common. The message arrives out of nowhere. It creates a small emergency. And it gives you one convenient link to solve it. That link is the whole scam. It leads to a page that looks real and asks for your card number, your bank login, or your Social Security number.

I know how convincing these things can be. My wife Sharon and I lost a large amount of money to a fraud that started with a message that looked completely legitimate. The people who write these are professionals, and they are good at their job. Falling for one does not mean you are careless. It means they are skilled.

The good news is that the defense is simple, and it works every time. Never tap the link in the message. That is the entire rule. If you think the message might be real, go to the source yourself. Type your bank's website into your browser, or call the number printed on the back of your card. Track your package on usps.com directly. If there really is a problem, it will be waiting for you there. In my experience, it almost never is.

A few more things worth knowing. The Postal Service does not send texts asking for money unless you signed up for tracking on a specific package. Your bank will never ask for your full password or PIN by text. And a real company will not mind if you hang up and call back on a number you looked up yourself. Only a scammer minds.

If you already tapped a link and entered information, do not be embarrassed and do not wait. Call your bank right away, then report it at reportfraud.ftc.gov. Acting in the first hours makes a real difference.

Delete the text, and if you want to do a good deed, warn a neighbor. Half the battle is simply knowing these messages exist before one lands on your phone.

Pete