Delivery Address Confirmation Scam

Scammers send a text claiming to be from USPS or U.S. Customs saying your package can’t be delivered because of an “invalid ZIP code” or missing address. The message includes a link to “confirm” your information or asks you to reply with a single letter (like Y). The link leads to a fake website that steals your personal details and card numbers, or installs malware.

I encountered this scam Learn common red flags
Primary example

How this scam works

  1. 1

    Step 1: You receive a text saying a USPS parcel is on hold and needs your ZIP code or address confirmed within 24 hours.

  2. 2

    Step 2: The message includes a link that looks official at a glance but isn’t the real usps.com (for example, usps.com-something.vip).

  3. 3

    Step 3: The fake site asks for your name, address, and often a small “redelivery fee,” pushing you to enter your credit card.

  4. 4

    Step 4: Once you submit details, scammers can charge your card, steal your identity, or send more scam messages.

✓ Do this

  • Go to the official USPS website by typing usps.com yourself or use the USPS app to check tracking.
  • Look up any tracking number on usps.com before doing anything.
  • Delete the text and report it to spam@uspis.gov or forward to 7726 (SPAM) if your carrier supports it.
  • Call your bank immediately if you entered card details on a suspicious site.

✗ Avoid this

  • Don’t click links in unexpected delivery texts, even if they say USPS or U.S. Customs.
  • Don’t enter your address, Social Security number, or payment info on sites you reached from a text.
  • Don’t reply to the text (even with STOP or Y) — it confirms your number is active.

Quick tip: Verify independently

Don’t call numbers or click links in unexpected messages. Go directly to the company’s official site or app and contact support from there.

See common red flags