The Postal Service™ is reminding employees and contractors to stay alert for smishing scams on USPS-issued devices.
Smishing is a type of cyberattack that uses text messages to trick people into providing sensitive information or taking harmful actions. Cybercriminals are impersonating Postal Service leadership and asking for personal data by sending text messages.
For example, a smishing text might say: “Dear Team Member, your account has been compromised. Click this link to verify your credentials. — USPS® Leadership.” If you’re asked to click a link to verify your ID, it’s probably a trap.
Postal Service employees and contractors must follow these tips to avoid falling for smishing scams:
n Be suspicious of text messages that request personal or business information or that require you to take immediate action.
n Don’t click on links in unexpected or unsolicited text messages.
n Be cautious of text messages from unknown or suspicious numbers.
n Don’t reply or respond to suspicious looking text messages.
n Block notifications from unsaved phone numbers to decrease the likelihood of falling for a smishing scam.
Report any suspicious texts received on USPS-issued devices by forwarding them to the Postal Inspection Services spam account at spam@uspis.gov.
