Cybersecurity threats are becoming increasingly sophisticated, and one of the latest scams involves fake text messages pretending to come from trusted organizations like USPS. At RichardTECH, we are committed to keeping you informed and protected against such scams. This article will help you recognize these phishing attempts and protect yourself from becoming a victim.
What Are Phishing Texts?
Phishing texts, also known as “smishing” (SMS phishing), are fraudulent messages designed to trick you into providing sensitive information, such as passwords, credit card details, or other personal data. These scams often impersonate trusted organizations to gain your trust and prompt immediate action.
Example of a Phishing Text
Below is an example of a suspicious message many people have reported receiving. The message claims to be from USPS, but it contains several red flags:
Message Details:
- The sender is an unfamiliar phone number.
- The message claims there’s an issue with a package due to an “invalid zip code.”
- It includes a suspicious URL (e.g.,
https://usps.com-packzem.com) that is not an official USPS website. - The instructions to reply with a “Y” and reopen the text to activate the link are highly unusual for USPS or any legitimate organization.
Red Flags to Watch Out For
Here are some signs that the text message you received might be a phishing attempt:
- Unknown Sender: The message comes from a phone number or email address that doesn’t look official.
- Suspicious Links: The URL in the message may look similar to a legitimate website but contains extra words, characters, or domains (e.g., “usps.com-packzem.com”).
- Urgent or Threatening Language: Scammers often use urgency (e.g., “Act within 24 hours”) to pressure you into acting without thinking.
- Poor Grammar or Spelling: Legitimate organizations usually proofread their messages carefully.
- Requests for Personal Information: USPS will never ask for sensitive information like passwords or credit card details via text.
What to Do if You Receive a Phishing Text
- Do Not Click the Link: Clicking the link could lead to malware being downloaded onto your device or your information being stolen.
- Do Not Reply: Replying to the message confirms that your number is active and may lead to more scam attempts.
- Verify the Message: If you’re concerned about the validity of the message, go directly to the official USPS website or contact USPS customer service.
- Report the Message:
- On iPhone: Tap “Report Junk” below the message.
- On Android: Block the sender and report the message as spam.
- You can also forward the message to 7726 (SPAM) to report it to your mobile carrier.
- Delete the Message: Once reported, delete the message from your phone.
How to Stay Safe Online
- Be Skeptical: Always question unexpected messages that request personal information or urge immediate action.
- Use Official Websites: Access services directly through official websites or apps instead of clicking on links in unsolicited messages.
- Enable Two-Factor Authentication (2FA): Adding an extra layer of security to your accounts can protect you even if your credentials are compromised.
- Keep Software Updated: Ensure your device’s operating system and antivirus software are up-to-date to protect against malware.
Final Thoughts
Phishing scams like this one are on the rise, but staying informed is the first step in protecting yourself. At RichardTECH, we prioritize cybersecurity and are here to help if you need guidance or support. Share this article with your friends, family, and colleagues to spread awareness and keep everyone safe from these deceptive scams.
Stay safe online,
Richard A. Ovalle JR
RichardTECH