Package delivery scam — delivered to your inbox

Expecting packages shipped to your home this holiday season? You’re not the only one… scammers are, too.

We’ve learned of a phony “delivery failure notification” email making the rounds. It looks like it’s from the U.S. Postal Service — but it’s not. The email says you missed a delivery. But, it says, if you print the attached form and take it to your local post office, you can pick up your package and avoid penalties. The message might also include a link for more details.

Here’s the truth: the email is bogus and there is no package. And if you download the attachment or click on a link, you’re likely to end up with a virus or malware on your device.

 Con artists often use the names and logos of familiar organizations to get under your guard. So how do you tell what’s legit and what’s a scam? Here are some ways to spot a bogus email:

  • It tells you to click on a link or download an attachment
  • It urges you to take immediate action
  • It asks you to “re-confirm” personal or financial information

Another sure sign an email is a scam? If you hover over the link in the email, it won’t show the official website of the supposed sender — in this case, the U.S. Postal Service website.

For more tips, check out our articles on phishing and malware. And if you have questions about a delivery by the U.S. Postal Service, visitusps.com or call 1-800-ASK-USPS.