Delivery Address Confirmation Scam

Scammers send a text claiming to be from USPS or U.S. Customs saying your package can’t be delivered because of an “invalid ZIP code” or missing address. The message includes a link to “confirm” your information or asks you to reply with a single letter (like Y). The link leads to a fake website that steals your personal details and card numbers, or installs malware.

Delivery Address Confirmation Scam example

How this scam works

  1. 1

    Step 1: You receive a text saying a USPS parcel is on hold and needs your ZIP code or address confirmed within 24 hours.

  2. 2

    Step 2: The message includes a link that looks official at a glance but isn’t the real usps.com (for example, usps.com-something.vip).

  3. 3

    Step 3: The fake site asks for your name, address, and often a small “redelivery fee,” pushing you to enter your credit card.

  4. 4

    Step 4: Once you submit details, scammers can charge your card, steal your identity, or send more scam messages.

✓ Do this

  • Go to the official USPS website by typing usps.com yourself or use the USPS app to check tracking.
  • Look up any tracking number on usps.com before doing anything.
  • Delete the text and report it to spam@uspis.gov or forward to 7726 (SPAM) if your carrier supports it.
  • Call your bank immediately if you entered card details on a suspicious site.

✗ Avoid this

  • Don’t click links in unexpected delivery texts, even if they say USPS or U.S. Customs.
  • Don’t enter your address, Social Security number, or payment info on sites you reached from a text.
  • Don’t reply to the text (even with STOP or Y) — it confirms your number is active.

Need help with a similar message?

Do not reply, pay, or use contact details in an unexpected message. Verify through the official app or website, then report what you saw so the Archive can connect related patterns.

Quick tip: Verify independently

Don’t call numbers or click links in unexpected messages. Go directly to the company’s official site or app and contact support from there.