Does USPS ever text about a delivery?

USPS does send text updates, but only for tracking you signed up for yourself, using a tracking number you already have. It doesn't text people out of the blue asking for a fee or for address details through a link.

The text had a real-looking tracking number. Doesn't that prove it?

No. A tracking number is just a string of characters in a message — anyone can type one. It proves nothing on its own, and scam texts often include a plausible-looking one precisely because it feels like evidence.

I clicked the link but didn't enter anything. Am I in trouble?

Usually not. Opening a page is far less serious than typing into it. Close the tab, don't go back, and don't enter anything if you return by accident. If you're unsure whether something was downloaded, keep your phone updated and run a scan with security software you already trust.

I entered my card details. What now?

Call your bank or card issuer straight away using the number on the back of your card and tell them the number is compromised. They can freeze the card and reissue it. Then read our guide on how to report a scam for the remaining steps.

← Is This A Scam?

USPS Text Scam: Package on Hold Messages

A text says your package is held up and a small fee will release it. The fee is the point — it's there to get your card number onto a form. Here's how to read one of these in a few seconds.

These messages work because they're plausible. Most people are waiting on something, the amount asked for is small enough not to be worth arguing about, and the message arrives with a deadline attached. That combination is doing all the work.

What one of these looks like

The wording moves around, but the shape stays the same:

USPS: Your package #US9847261 is on hold due to an incomplete address. Update your details within 24 hours to avoid a return-to-sender fee of $3.30.
usps-redelivery.shop/track

Four things are happening at once: an authority you recognise, a problem you didn't know about, a deadline, and a link that fixes it. Real delivery problems rarely arrive with all four.

Red flags to look for

The web address isn't usps.com. Look at the part immediately before the first single slash — in usps-redelivery.shop/track, the real domain is usps-redelivery.shop, not USPS. Anyone can register a name with "usps" in it.
An unusual ending like .shop, .top, .icu, .cc or .info on what claims to be a government service. USPS uses usps.com.
A fee that's oddly small. $1.99 or $3.30 feels too trivial to be a scam, which is exactly why it's chosen. The money isn't the goal — your card number is.
A deadline measured in hours, usually 24 or 48. Real delivery exceptions don't expire that fast.
You weren't expecting a delivery at all, or the message doesn't name what was ordered or who sent it.
The message asks you to "verify" or "confirm" your address, when a delivery service would already have the address on the label.
It arrives from an ordinary mobile number, an email address, or an overseas number rather than a short code.

The part most people miss

Read a web address from the end of the domain backwards, not the start. Everything before the first single slash is the domain; only the last two parts of it matter. usps.com.tracking-update.net is not USPS — it's a site called tracking-update.net that has put "usps.com" in front to look right. We cover this in more detail in how to check a suspicious link.

What to do instead

1Don't tap the link. Nothing in the message is time-sensitive enough to justify it.
2If you're expecting a package, go to the retailer's order page or the carrier's own app and look the order up there. Type the address yourself rather than searching, so you don't land on an ad for a lookalike site.
3Check whether you have a tracking number from the seller. If the number in the text doesn't match anything you ordered, that settles it.
4Report the text as junk or spam in your messaging app, then delete it. On most phones you can forward a suspicious SMS to 7726 (SPAM) to report it to your mobile carrier.
5If you already entered card details, call your bank using the number on the back of your card and ask them to freeze it.

Not sure about a delivery text you got?

Paste it into the free checker and see the specific red flags in it. No signup, no email.

Check a message

If you already paid

The charge itself is usually small, but the card number is now somewhere it shouldn't be, and the bigger risk is what gets attempted later. Treat the card as compromised rather than watching to see what happens. Our reporting guide covers the order to work through and where to file a report.

Common questions

Does USPS ever text about a delivery?: USPS does send text updates, but only for tracking you signed up for yourself, using a tracking number you already have. It doesn't text people out of the blue asking for a fee or for address details through a link.
The text had a real-looking tracking number. Doesn't that prove it?: No. A tracking number is just a string of characters in a message — anyone can type one. It proves nothing on its own, and scam texts often include a plausible-looking one precisely because it feels like evidence.
I clicked the link but didn't enter anything. Am I in trouble?: Usually not. Opening a page is far less serious than typing into it. Close the tab, don't go back, and don't enter anything if you return by accident. If you're unsure whether something was downloaded, keep your phone updated and run a scan with security software you already trust.
I entered my card details. What now?: Call your bank or card issuer straight away using the number on the back of your card and tell them the number is compromised. They can freeze the card and reissue it. Then read our guide on how to report a scam for the remaining steps.

This page is informational and we aren't affiliated with any company or agency named on it. We can't tell you whether your specific message is genuine. Verify independently: open the company's official app or type their website address yourself, and call the number printed on your card, statement, or the back of your ID — never a number supplied by the message.

Want simple scam alerts for your family?

Join the early-access list. This is an idea we're testing, not an active protection service — nothing is monitored today, and joining changes nothing about your accounts.