Exposing the USPS “Issues With Your Shipping Address” Scam

A troubling new phishing scam has emerged that targets unsuspecting victims under the guise of a USPS delivery problem notification. This expansive article will provide a detailed exposé on how the “Issues With Your Shipping Address” scam works, how to avoid becoming a victim, and what to do if you fall prey.

Scam Overview

This scam typically starts with the target receiving an email, text or phone call that convincingly appears to originate from the United States Postal Service. The message claims there is an issue verifying or confirming the recipient’s shipping address for pending package deliveries.

The notification urges the recipient to click a link or call a provided number to resolve the address problem immediately. However, this leads to a fake USPS website or call center impersonating the real USPS. If individuals then enter or provide any personal data, the scammers steal it to engage in identity theft or sell it on the black market.

This scam has already deceived thousands into compromising sensitive information, resulting in drained bank accounts, credit card fraud, and destroyed credit reports. Keep reading to learn how to detect this scam and avoid becoming the next victim.

How the Scam Works

Scammers rely on carefully crafted tricks and pressure tactics to successfully pull off this scam. Here is an outline of how they strategically mislead victims at each stage:

1. Crafting Fraudulent Notifications

The first step scammers take is creating email, text and phone scripts impersonating communications from the USPS. These may mention a fake tracking number and a pending delivery requiring address confirmation before release.

The messages are modeled after real USPS alerts related to undelivered packages, missed delivery attempts, and address verification requests. However, phony details are added to manipulate users.

The texts and calls feature prerecorded voices or automated messages. Email subjects state things like: “USPS Delivery Problem,” “Shipping Address Issue,” “Unable To Verify Your Address,” or “Complete Delivery – Confirm Your Address.”

These notifications leverage urgency and threats of non-delivery to provoke panic and quick action. Victims are less likely to scrutinize the details.

2. Directing Victims to Fake Websites and Call Centers

The fraudulent notifications all direct recipients to either click a link or call a provided phone number to resolve the address issue immediately.

However, the link goes to a sophisticated replica of the official USPS website. And the phone number routes to a scam call center impersonating USPS.

Both the fraudulent site and call center are specially designed to closely mimic the real USPS experience. But they are rigged to collect and steal user data instead of fixing any real issues.

3. Collecting Personal Information

Once directed to the phony website or call center, victims see forms prompting them to enter details like full name, street address, date of birth, social security number, credit card number, account usernames, and account passwords.

The scammers claim collecting this information verifies the user’s identity and shipping address. But in reality, the personal data gets stolen.

In some cases, the fraudulent sites may also:

• Plant malware on the victim’s device to spy and steal data.
• Use pop-ups for fake security alerts that capture private data.
• Redirect to other scam websites to harvest additional financial information.

4. Exploiting Stolen Information

Armed with stolen personal data, the scammers then engage in identity theft and financial fraud. Just some examples include:

• Withdrawing funds from the victim’s bank and financial accounts
• Making purchases and opening lines of credit using stolen identity details
• Filing for unemployment and tax refunds using victims’ information
• Accessing online accounts via compromised usernames and passwords
• Selling bundles of victims’ personal data on the black market

The scammers can also exploit the details to commit additional thefts while posing as the victims. The financial and identity theft ramifications can be severe and challenging to unwind.

5. Pursuing Second-Round Scams

Scammers frequently capitalize on compromised victims with follow-up scams as well. For example:

• They may call victims pretending to be USPS security asking for more details or money to stop identity theft already in motion.
• Scammers call posing as bank fraud investigators, asking victims to send money to aid an asset recovery process that doesn’t exist.
• They contact victims offering to fix hacked devices or restore stolen funds for an upfront fee they pocket.

These secondary scams prolong victims’ suffering and lead to additional financial theft.

What to Do If You’re a Victim

If you entered any sensitive information, account details or other personal data on a fraudulent USPS site or phone line, take these steps immediately:

Contact Banks and Credit Bureaus

Notify your bank and financial institutions your identity has likely been compromised. Have them freeze your accounts and flag for suspicious charges. Ask about reversing fraudulent transactions if found.

Also, place 90-day fraud alerts on your credit files at the three major credit bureaus to halt thieves opening new lines of credit.

Change All Passwords

Reset every password you have for financial, email, social media and other online accounts. Make them long and complex. Also set new security questions and enable two-factor authentication for accounts that offer it.

Monitor Statements Closely

Watch bank and credit statements routinely for any unfamiliar account activity. Report any transactions you don’t authorize to your bank’s fraud department right away.

Place Fraud Alert

Contact one credit bureau to place a 90-day fraud alert. This flags your credit file requiring lenders to verify identity before extending new credit. Add an extended 7-year alert if needed.

File Reports

File a scam report with the real USPS through USPS.com and notify the Federal Trade Commission. This can aid investigations to stop the scam from deceiving others.

Avoid Paying “Recovery” Scammers

Be alert for any call or email claiming they can recover stolen funds or fix your identity if you pay a fee first. This is always a secondary scam. Only work with real institutions on fraud resolution and never prepay.

Spotting This Scam

While this scam can appear quite legitimate, these tips can help expose the fraud:

Analyze Message Details

Scrutinize any shipping notifications closely:

• Look for poor grammar/spelling – Legitimate USPS alerts would not contain errors.
• Mismatching details – Ensure the phone numbers, addresses, names, and other specifics all check out.
• Odd urgency or threats – Real USPS rarely resorts to intimidation urgency to prompt action.
• Unusual timing – Being contacted late at night about a delivery issue can signal fraud.

Verify Before Clicking Links

Inspect any provided links carefully:

• Hover over the link – Preview the actual destination URL before clicking to reveal mismatched domains.
• Double check URLs – Typos or extra numbers/letters in addresses signal a phishing site.
• Use site tools – Copy and paste URLs into scam checking tools to detect fraud.

Analyze Websites

Study any USPS site you land on closely:

• Cross-reference designs – Subtle differences in logos, fonts, colors, and page layouts can expose spoof sites.
• Verify security – Phishing sites lack HTTPS protocol and the padlock icon in the URL bar.
• Try to login – Phony sites only show info forms without allowing logins to your private account portal.
• Assess functionality – Broken page elements, mislinked navigation, and errors reveal shady sites.

Confirm Call Center Validity

Use these tips when dealing with USPS call centers:

• Hang up and call back – Use USPS official numbers found on USPS.com to verify alleged representatives.
• Ask for credentials – Request ID numbers and names to check. Real USPS agents will provide without hesitation.
• Don’t disclose info – Never give personal or financial details to unverified callers claiming to be USPS agents.

Avoiding This Scam

Here are key ways to avoid falling victim to the “USPS Issues With Your Shipping Address” scam:

• Never act quickly regardless of threats conveyed. Always research first.
• Verify supposed address issues by calling official USPS numbers independently.
• Check that any links go directly to USPS.com before clicking.
• If entering a site, ensure it has valid USPS branding, URLs, and security certificates.
• Do not disclose personal information over the phone either. Request callbacks after independently looking up numbers.
• Use unique complex passwords for all accounts, changed regularly. Enable two-factor authentication when available.
• Keep software patched and updated to detect fraudulent sites trying to install malware.
• Sign up for USPS scam alerts to stay on top of the latest tricks targeting customers.

Is Your Device Infected? Check for Malware

If your device is running slowly or acting suspicious, it may be infected with malware. Malwarebytes Anti-Malware Free is a great option for scanning your device and detecting potential malware or viruses. The free version can efficiently check for and remove many common infections.  

Malwarebytes can run on Windows, Mac, and Android devices. Depending on which operating system is installed on the device you’re trying to run a Malwarebytes scan, please click on the tab below and follow the displayed steps.

Frequently Asked Questions

For additional facts about the “USPS Issues With Your Shipping Address” scam see these FAQs:

Are scammers able to spoof legitimate USPS phone numbers?

Yes, scammers use technical tricks to make scam calls appear to come from real USPS 1-800 numbers on caller IDs. Always independently look up and dial official numbers instead of calling back missed call notifications alone.

How do scammers obtain my personal contact information?

Scammers buy hacked customer databases online or acquire emails and phone numbers from shady data aggregators. They may also scrape publicly available information from websites and social media using bots. It only takes one breach for data to spread across scammer networks.

Can I determine if an email is a scam from the subject line alone?

Sometimes. Suspicious keywords like “USPS Delivery Failure”, “Authorization Required” or “Action Needed” should raise red flags. However, some scams now use innocent sounding subjects about package updates. Check the sender address for the biggest clue.

Is providing an email address or phone number to scammers risky?

Absolutely. Scammers can use email and phone numbers to then target victims across other channels and campaigns. They become malware distribution points or identifiers to access accounts once credentials are phished. Treat contact data as sensitive.

How can data entered on phishing sites be used to commit identity theft?

Scammers can use personal details like names, addresses, and birthdates paired with social security numbers to open fraudulent credit cards or bank accounts. Stolen account credentials also grant direct access to assets and sensitive information that fuels financial theft.

What should I do if a scammer calls repeatedly?

Consistently report scam call numbers to the FTC Do Not Call list, USPS postal inspectors, and your phone carrier. You can use call screening/blocking tools as well. Repeated scam calls are used to intimidate but disengaging quickly remains your best defense.

In Conclusion

This scam leverages familiarity with USPS communications and urgency surrounding package deliveries to lower defenses and steal personal data. However, being informed on common tricks these scammers use makes it much simpler to detect fraudulent notifications and websites. Verify supposed USPS alerts completely before providing information or clicking on links. Being proactive is the best way to avoid having your identity and finances compromised through this scam.