“This is USPS. Your package has been temporarily held. Please verify your ZIP code information through the link within 24 hours.”

This is a smishing scam text received by an actual Korean individual, falsely claiming to be from the United States Postal Service (USPS). Recently, scams impersonating USPS have been on the rise, spreading through text messages, prompting residents, including the Korean community, to exercise caution. Scammers send messages claiming issues with mail or package deliveries, embedding a link designed to extract personal and financial information.

As online shopping surges ahead of Christmas, smishing scams posing as USPS and asking for sensitive personal or financial information are becoming more prevalent, according to the LA Times. The Federal Postal Inspection Service warns that scammers often impersonate government agencies, banks, or well-known companies to request sensitive information such as names, credit card details, Social Security Numbers (SSN), and driver’s license numbers.

Exploitation of Collected Information
The collected information is frequently manipulated, sold, or used for other fraudulent activities. The Federal Communications Commission (FCC) strongly warns, “If you receive a text from an unknown number or from an organization where you haven’t signed up for notifications, it’s highly likely to be a scam.”

When sending packages or ordering items through USPS, receipts include a tracking number, allowing users to track delivery status via the USPS website or text updates. However, USPS generally does not send text messages requiring direct responses from users. USPS clarified, “Unless a customer has registered for specific USPS tracking requests, they will not receive USPS-related texts,” urging caution.

Real Case Example
A Korean resident in LA, identified as Cho, shared a close call with such a scam. Cho explained, “While waiting for items I had ordered as gifts for friends, I received a text claiming there was an issue with the delivery. The request for personal information seemed suspicious, so I deleted the message immediately. However, I could have easily entered my personal details if I hadn’t been more careful.”

FBI Recommendations
The FBI emphasizes that legitimate organizations rarely request usernames and passwords directly from users. To avoid falling victim to smishing scams, the FBI advises:

Do not click links, respond, or attempt to call back any suspicious text messages.
Even if the text offers an option to reply with “STOP,” do not respond.
Delete suspicious messages immediately.
To verify if a message is legitimate, refer to receipts or look up the official customer service number or email from the company or organization’s website.
The FBI also recommends enabling multi-factor authentication to protect sensitive personal data, including bank accounts, health records, and social media accounts.

Reporting Smishing Scams
Authorities urge victims of mail-related smishing scams to report incidents to spam@usps.gov. When reporting, include the following:

A screenshot of the suspicious text message.
The sender's phone number and the date the message was sent.
Whether the recipient clicked the link or responded to the message.
Whether any personal information was compromised.
By Reporter Hwang Eui-kyung

<Hwang, Eui-kyung>