Fake USPS Text Messages Steal Your Amazon Login

1. What Happens If You Click the Link
2. What Happens After You Enter Your Login Information
3. Signs of a USPS Scam Text to Look For
4. What Happens if I Click the Link?
5. How to Recover After Being Scammed
6. Report the USPS Scam Text Messages
7. Frequently Asked Questions

A USPS scam text message alert is circulating that attempts to convince you that there is a shipping error on one of your Amazon purchases. It claims that your shipping address doesn’t have the correct zip code, so your package won’t be delivered unless you fix it. 

Example Fake USPS Text Message

[USPS Tracking]: Your shopping address does not match the zip code, we cannot deliver, pls re-enter complete information. https://is.gd/ew_OQ

What Happens If You Click the Link

The text message contains a link that takes you to a fake Amazon login page when clicked. 

Depending on the web browser you’re using, you may only see the fake Amazon page for a second before your browser will warn you that it’s a deceptive site. 

If your browser doesn’t have good security features, you’ll stay on the fake Amazon login page. The scammers bank on people not realizing that the Amazon website is not genuine, and enter their username and password. 

What Happens After You Enter Your Login Information

You enter your username and password onto the website, thinking you’re on the genuine Amazon login page. Unfortunately, this isn’t the case. Once you enter your information, the scammers will have it may use it to:

• Log into your real Amazon account
• Lock you out of your Amazon account by changing your password and details
• Purchase items from Amazon using your stored payment information
• Post fake reviews on items
• Sell to other scammers

Scammers who purchase items on your Amazon account will usually use fake shipping addresses, so Amazon won’t be able to track them down. For example, they could use a public address, such as a hotel, or will enter a random address and meet the delivery driver outside. 

Signs of a USPS Scam Text to Look For

The first thing to be aware of is that USPS only sends text messages if you first request tracking information for the specific package in the first place. If you receive a text message from USPS without requesting tracking information, you can be sure it’s a scam. 

Additionally, USPS text messages you didn’t register for will never contain a link. 

Phone Number

The first thing to look at when receiving text messages from USPS is the phone number it’s been sent from. If the number looks like a regular 10-digit number, it’s a scam. 

USPS tracking update texts will come from 28777 (2USPS)—the same number you texted to get the tracking update. 

The URL

These USPS scam text messages will always contain a link—that’s how they get you. The purpose of the scam is to steal your Amazon login information, so they need you to click the link. 

If you look at the link in the text, it’s not a genuine USPS URL or an Amazon web address. This is a sure sign of a scam—do not click the link. 

USPS will also never send you to a third-party site to update your shipping address. If there’s an error with your zip code, the post office will usually correct it and ensure it’s sent to the right address. This will usually delay the shipment, but it will still be delivered. 

If there’s an issue with your shipping address (e.g., the address doesn’t exist, and it’s more than just a zip code error), the package will likely be returned to the sender. 

Typos and Bad Grammar

A common sign of a scam is bad spelling or grammar, and this scam is no different. In this example, the USPS scam text message says "shopping address" instead of "shipping address." Communication with legitimate organizations, such as USPS, usually won’t contain errors like this. 

What Happens if I Click the Link?

You may not always be on high alert for a scam, and text message scams may seem legitimate, so you may click the link by mistake. If you do, the harm isn’t done quite yet. The scam is only complete when you enter your login information on the fake Amazon website. 

It’s essential that you don’t enter any information on this page, or the scammers will gain access to your Amazon account. 

If you do enter your information, you’ll need to act quickly to protect your Amazon account. 

How to Recover After Being Scammed

If you enter your login information into the scam Amazon site, you must act quickly to ensure the scammer doesn’t gain access to your account. Follow these steps:

• Log into your Amazon account and change your password.
• If the scammer has already changed your password and email saved in your Amazon account, you won’t be able to log in. Contact Amazon and report the scam. 
• Cancel your credit cards saved in your Amazon account and report the situation to your bank. 
• Monitor your credit card and bank account transactions to ensure the scammer isn’t making fraudulent transactions. 
• Report any fraudulent transactions to your bank and Amazon. 
• If you gain access to your Amazon account, check the order history and report any transactions that the scammer made. 

Report the USPS Scam Text Messages

If you receive a fake USPS text message, email the following to [email protected]:

• A screenshot of the text message
• A copy of the text inside the message
• The phone number the text was sent from
• The date the text was sent

If you fell for the scam, provide information on what was stolen, for example:

• Your Amazon login information
• Your credit card information
• Money

Be sure to also include your contact information, so the USPS can follow up if needed. 

You can also report the scam to:

• The Federal Trade Commission
• The FBI’s Internet Crime Complaint Center (IC3)