Smishing Scam Featuring USPS

Cybercriminals are sending out text messages known as a smishing scam to people claiming to be the Postal Service. The cybercriminals crafted this scam to scare people into sharing personal details with them. They let the person know that a package can’t be delivered because there is an incomplete address and includes a PDF for you to add a completed address.

When the person opens the PDF it directs them to a webpage that is a fake USPS page. This webpage will prompt the person to fill out an address, add their personal data and will even ask them to fill out their credit card information. Once all of this information is entered, the cybercriminals have access to all of it and can steal it for their own gain!

TIPS:

• Never click on a link from an unexpected message.
• Check your app or account by logging in on a trusted website to see if you have a package in transit that can’t be delivered.
• Never reply to unexpected messages.

‍