“U.S. Customs Detainment Notice” USPS Scam Text Explained

Have you received a text claiming U.S. Customs has a package of yours on hold? Don’t rush to confirm your address. This is the latest phishing scam making the rounds and feigning urgency to steal your personal information.

This comprehensive guide will break down exactly how the “U.S. Customs Detainment Notice” scam works, what scammers are after, and most importantly, how to protect yourself from their phishing attempts.

Scam

What is the U.S. Customs Detainment Notice Scam?

This scam starts with potential victims receiving a text message claiming that U.S. Customs has detained a package addressed to you sent from China, due to an “invalid shipping address.”

The message states that you must click a provided link within 24 hours to “confirm your address information” so they can release the package. However, the link leads to a fake website designed to steal your personal information and payment data.

The official-sounding notice and short deadline pressure victims to act quickly without scrutinizing the message. But any supposed fees or information checks are purely a scam tactic. Customs does not contact individuals regarding packages in this manner.

How the U.S. Customs Detainment Notice Scam Actually Works

Here is a step-by-step explanation of how scammers carry out this scam:

Step 1. Victims Receive a Phishing Text

The scam starts with a text sent to potential victims claiming that U.S. Customs has a package from China on hold because of an invalid shipping address.

The message states you must confirm your address within 24 hours via a provided “tracking link” or the items will be returned to the sender. The text may claim to be from USPS rather than directly from Customs.

Step 2. Victims Click the Tracking Link

Eager to receive their package as soon as possible, victims click the tracking link expecting to be taken to the USPS, U.S. Customs, or shipping carrier website to correct their address.

Step 3. The Link Leads to a Fake Customs Website

The tracking link actually directs to a website impersonating U.S. Customs, USPS, or a shipping carrier. The site has logos and branding making it appear legitimate.

A form requests personal details to “verify your identity” and release the detained package. Details requested include your name, date of birth, address, phone number, and sometimes Social Security Number.

Step 4. Victims are Redirected to Another Phishing Page

After entering personal information, victims are redirected from the verification website to another page stating there is a customs clearance fee required on the package. This completes the illusion that Customs truly has a package detained.

The page requests credit card information, often stating the victim must pay a fee (for example, $5.99 USD) to have the package released and sent on to its destination.

Step 5. Scammers Steal Financial and Personal Information

Unfortunately at no point was U.S. Customs or a shipping carrier actually trying to contact the victims. The entire interaction – from the initial text to the imitation agency websites – was carefully crafted by scammers to steal personal and financial information.

With the victim’s name, birthdate, address, credit card, and potentially Social Security info, the scammers are equipped to commit identity theft, payment fraud, and more.

What Information Do Scammers Obtain Through This Scam?

By the time those targeted by this scam reach the end of the process, the scammers can accumulate a significant amount of sensitive data, including:

  • Full Name – Victims enter first and last name on the Customs verification form.
  • Phone Number – Mobile number may be requested on the verification form or extracted from the original text.
  • Home Address – To “confirm the shipping address”, home address is requested on the form.
  • Email Address – Forms often request your email address in addition to other data.
  • Date of Birth – DOB helps enable wider identity theft and fraud.
  • Social Security Number – Some forms directly request SSN, while others enable it to be looked up using other details.
  • Credit Card Number – The fake customs fee page requires a full credit card number, security code, and expiration date to complete the payment.

With just basic information like your name, address, and date of birth, scammers may be able to find or access your SSN and additional financial accounts. All data obtained throughout this scam enables them to steal identities, make fraudulent purchases, or sell the details on the dark web.

Why Do So Many Fall Victim to This Scam?

This highly effective scam manages to trick victims through a few clever methods:

  • Spoofed numbers make texts look legitimate – Scammers use spoofing apps and services to mask phishing texts as government agencies or shipping carriers.
  • Messages instill urgency – The short 24 hour timeframe pushes victims to act immediately out of fear their package will be returned.
  • Official branding builds trust – The imitation agency websites use valid logos, fonts, and designs to pose as authentic.
  • Low fee seems reasonable – A $5 customs clearance cost appears normal and worth paying to receive your package.
  • Preys on expecting a package – Those actually awaiting a package from China or elsewhere overlook the scam signs.
  • Limited package tracking information – Most customs and shipping information is vague until a package is in transit, so victims cannot verify its authenticity.

With full knowledge of how this scam works, it becomes much easier to identify and avoid.

5 Ways to Recognize the Customs Detainment Notice Scam

While the scam texts and websites may look official at first glance, upon closer inspection there are subtle indicators they are phishing ploys:

1. Generic Addressed to “Sir/Ma’am” – Legitimate Customs or shipping messages address you by name, whereas scam messages remain generic with “Dear sir or madam.”

2. Lack of Specific Package Details – Real notices would include the specific contents, but scams remain vague to cast a wider net.

3. Poor Grammar and Spelling – Texts and websites from government agencies would not contain misspellings or syntax issues.

4. Requests for Sensitive Information – Customs will never request your SSN or date of birth simply for mailing address verification.

5. Threat of Return to Sender – Customs will not threaten to return packages to sender if you do not provide personal information. They hold items throughout investigation.

What to Do If You Receive a Suspicious Customs Detainment Text

If you receive a questionable text message claiming Customs has a package for you on hold, follow these steps:

  • Do NOT click on any links – The link could download malware or direct you to a phishing website.
  • Double check the sender – Confirm the sender is a legitimate government or shipping carrier number, not a series of random digits.
  • Perform a web search on the provided tracking number – A search should show if a real package with that tracking number exists.
  • Call U.S. Customs directly – Use the official Customs phone number to inquire with an agent if they truly are holding your package.
  • Report the phishing text – Forward it to SPAM (7726) so your carrier can block the sender. You can also report it directly to the FTC.
  • Delete the message – Remove the text immediately from your messaging app to avoid accidentally interacting with it.

What to Do if You Already Fell for the Customs Detainment Scam

If you unfortunately already provided personal or financial information to the scammers, take these steps immediately to mitigate damages:

  1. Call your bank and credit card companies – Alert them to fraudulent charges or the compromised card details. Request replacement cards be issued.
  2. Place a fraud alert – Contact the credit bureaus to implement a fraud alert on your credit file so no new lines of credit can be opened.
  3. Freeze credit reports – Freeze access to your credit reports to block criminals from being able to open fraudulent accounts.
  4. Change account passwords – Update the password and security questions for your email, bank, and other accounts where you use the same password.
  5. Monitor credit reports and accounts – Watch closely for any signs of misuse of your personal information, and report unauthorized activity immediately. Sign up for credit monitoring if possible.
  6. File an FTC complaint – Submit a complaint to the FTC detailing how your information was compromised via this scam.

Expert Tips to Avoid Customs and Shipping Scams

Beyond just this specific scam, use these proactive tips to guard yourself from customs and shipping-themed phishing texts in general:

  • Never click links in unexpected texts – Manually look up sites instead.
  • Verify senders independently before providing info.
  • Never click links in unexpected texts – Manually look up sites instead.
  • Verify senders independently before providing info.
  • Track packages using official carrier sites and customer service numbers.
  • Avoid phone numbers in texts—find official numbers yourself.
  • Know government agencies don’t contact citizens asking for personal financial information.
  • Carefully check sites for misspellings, grammar issues, and other red flags.
  • Do not trust Caller ID—scammers spoof real numbers.
  • Only provide info over the phone when you initiated contact with the verified company.
  • Utilize antivirus/anti-phishing browser extensions and phone apps.
  • Never pay questionable fees with retail gift cards – that’s always a scam tactic.
  • Confirm clearance delays and required payments directly with the shipping carrier.
  • Report any phishing texts or calls regarding shipments to carriers and government agencies.

Staying vigilant against shipment and customs scams protects your personal and financial data.

Frequently Asked Questions about the U.S. Customs Detainment Notice Scam

1. What is the U.S. Customs detainment notice scam?

The U.S. Customs detainment notice scam is a phishing scam where victims receive a text claiming U.S. Customs has detained a package addressed to you. The message contains a link to a fake U.S. Customs website that prompts victims to enter personal information to allegedly release the package. Victims are then redirected and asked to pay a small customs fee online. In reality, the sites are fraudulent and used to steal identity and financial information.

2. How does the Customs detainment notice scam work?

Scammers send texts stating Customs has a package on hold due to an invalid shipping address. Victims are instructed to click a link and verify their address within 24 hours or the package will be returned. The link leads to a fake site that collects personal information, before redirecting to another site that requests credit card details to pay a small customs clearance fee.

3. What details do the scammers ask for?

Scammers may ask for full name, date of birth, phone number, home address, email address, Social Security Number, driver’s license details, passport number, and credit card number in order to allegedly verify your identity and process customs clearance.

4. What do scammers do with my information?

Scammers use your personal information like your name, date of birth, and address to steal your identity and open fraudulent accounts. They use credit card details to make unauthorized purchases in your name. The data enables a wide range of identity theft and financial fraud.

5. Why do people fall for the Customs detainment notice scam?

Factors like an urgent 24 hour notice, spoofed official numbers, and convincing fake Customs websites cause people to believe the message is legitimate. Victims provide their details thinking it will release a package, when in reality they are handing data directly to scammers.

6. How can I recognize the U.S. Customs scam?

Watch for poor grammar/spelling, lack of specific package details,threats of return to sender, requests for unnecessary personal information, subtle website differences, and customs fees paid via gift cards, which is never legitimate.

7. I got the scam text. What steps should I take?

Do not click any links, report the number that texted you, delete the message, avoid calling numbers in the text, and never provide the senders with any personal or financial details. Verify a package detention directly with Customs first.

8. I already entered my information. What should I do now?

Contact your bank about any payments. Place fraud alerts on your credit. Monitor your credit reports and financial accounts closely for signs of misuse of your information and identity theft. Change account passwords and file an FTC complaint.

9. How can I avoid future Customs scams?

Steps like never clicking text links, tracking packages via official carrier sites, double checking senders, and avoiding phone numbers in texts can help protect you from future Customs and shipping scams.

10. Who can I report the U.S. Customs scam to?

You can report the scam texts to your mobile carrier, the FTC’s complaint assistant, USPS postal inspectors if texts claim to be from USPS, and directly to U.S. Customs and Border Protection via their online tip form.

The Bottom Line – Avoid Falling Prey

This U.S. Customs detainment scam can seem legitimate thanks to official-looking texts and websites. But understanding the detailed tactics these scammers use allows you to identify the red flags and protect your sensitive information.

Government agencies like Customs will never contact you unprompted demanding personal information or fees in relation to a package. Any texts making such claims are scammers hoping you’ll let urgency cloud your judgment. But remaining calm and verifying things independently thwarts their goals.

If you received a suspicious text from someone claiming to be Customs, cease all communication immediately. Do not provide any information or click links. Report the phishing text to help warn others, and delete it from your phone to avoid accidental clicks down the line. Stay vigilant for similar scams moving forward. With caution, you can ensure no supposed “detained package” tricks you into having your identity and accounts detained by scammers instead.

How to Stay Safe Online

Here are 10 basic security tips to help you avoid malware and protect your device:

  1. Use a good antivirus and keep it up-to-date.

    Shield Guide

    It's essential to use a good quality antivirus and keep it up-to-date to stay ahead of the latest cyber threats. We are huge fans of Malwarebytes Premium and use it on all of our devices, including Windows and Mac computers as well as our mobile devices. Malwarebytes sits beside your traditional antivirus, filling in any gaps in its defenses, and providing extra protection against sneakier security threats.

  2. Keep software and operating systems up-to-date.

    updates-guide

    Keep your operating system and apps up to date. Whenever an update is released for your device, download and install it right away. These updates often include security fixes, vulnerability patches, and other necessary maintenance.

  3. Be careful when installing programs and apps.

    install guide

    Pay close attention to installation screens and license agreements when installing software. Custom or advanced installation options will often disclose any third-party software that is also being installed. Take great care in every stage of the process and make sure you know what it is you're agreeing to before you click "Next."

  4. Install an ad blocker.

    Ad Blocker

    Use a browser-based content blocker, like AdGuard. Content blockers help stop malicious ads, Trojans, phishing, and other undesirable content that an antivirus product alone may not stop.

  5. Be careful what you download.

    Trojan Horse

    A top goal of cybercriminals is to trick you into downloading malware—programs or apps that carry malware or try to steal information. This malware can be disguised as an app: anything from a popular game to something that checks traffic or the weather.

  6. Be alert for people trying to trick you.

    warning sign

    Whether it's your email, phone, messenger, or other applications, always be alert and on guard for someone trying to trick you into clicking on links or replying to messages. Remember that it's easy to spoof phone numbers, so a familiar name or number doesn't make messages more trustworthy.

  7. Back up your data.

    backup sign

    Back up your data frequently and check that your backup data can be restored. You can do this manually on an external HDD/USB stick, or automatically using backup software. This is also the best way to counter ransomware. Never connect the backup drive to a computer if you suspect that the computer is infected with malware.

  8. Choose strong passwords.

    lock sign

    Use strong and unique passwords for each of your accounts. Avoid using personal information or easily guessable words in your passwords. Enable two-factor authentication (2FA) on your accounts whenever possible.

  9. Be careful where you click.

    cursor sign

    Be cautious when clicking on links or downloading attachments from unknown sources. These could potentially contain malware or phishing scams.

  10. Don't use pirated software.

    Shady Guide

    Avoid using Peer-to-Peer (P2P) file-sharing programs, keygens, cracks, and other pirated software that can often compromise your data, privacy, or both.

To avoid potential dangers on the internet, it's important to follow these 10 basic safety rules. By doing so, you can protect yourself from many of the unpleasant surprises that can arise when using the web.

Leave a Comment