Active scam wavedelivery / smishing text scam · verified active as of September 30, 2026

Got a “USPS” delivery text with a link? Paste the exact link here for a free instant scam check ↓

Free risk-score preview · full report with all 5 red flags for $4.99 · no subscription

No link handy?

USPS text scam: “package on hold, verify your address”?

Q: What are the red flags of the USPS “package on hold” text scam?

“Package on hold” or “address couldn’t be verified”: Vague delivery problems with a fix-it link are the classic hook — especially if you weren’t expecting a parcel. A small redelivery or “customs” fee: Carriers don’t collect a random fee by texted link. The tiny charge exists to capture your card number. A look-alike or shortened link: The link isn’t usps.com / ups.com / fedex.com — it’s a look-alike domain or a URL shortener hiding the real destination. A tight deadline to “update” details: “Confirm within 12 hours or it’s returned” is pressure designed to stop you checking. It asks for your address, card or login: Real tracking never needs your card or password — that page is built to harvest them.

Fake USPS “your package is on hold” and “we couldn’t verify your address” texts are everywhere right now. Here’s the tell — and a free way to check the link.

What’s happening

Texts claiming a USPS (or UPS, FedEx, DHL) package is “on hold”, that your address “couldn’t be verified”, or that a small redelivery fee is due are one of the highest-volume smishing scams in circulation. The FTC and the U.S. Postal Inspection Service have repeatedly warned about this exact wave, which spikes hard around busy shopping periods.

The link opens a page that copies the carrier and asks you to “confirm” your address and pay a small fee with your card — the fee is bait; your card and personal details are the prize. A common variant gives you a tight deadline (“update within 12 hours or your package is returned”).

USPS does not send tracking texts with a link unless you asked for them with a tracking number first, and it never charges a random redelivery fee by text. Don’t tap it — paste the link for an instant risk score and track any real parcel on the carrier’s official site instead.

What a real message looks like: USPS only texts tracking updates you requested with a tracking number first — and those texts never contain a payment link.

5 red flags of the USPS “package on hold” text scam

If the message you got shows any of these, treat it as a scam. Not sure about the link? Paste it above and our report grades every signal and tells you exactly what it found.

1. “Package on hold” or “address couldn’t be verified”

Vague delivery problems with a fix-it link are the classic hook — especially if you weren’t expecting a parcel.

2. A small redelivery or “customs” fee

Carriers don’t collect a random fee by texted link. The tiny charge exists to capture your card number.

3. A look-alike or shortened link

The link isn’t usps.com / ups.com / fedex.com — it’s a look-alike domain or a URL shortener hiding the real destination.

4. A tight deadline to “update” details

“Confirm within 12 hours or it’s returned” is pressure designed to stop you checking.

5. It asks for your address, card or login

Real tracking never needs your card or password — that page is built to harvest them.

Paste the link to check it now — free

We check the link and hand you an intelligence report — we don’t recover funds, execute takedowns, or give legal advice.

What to do right now

1Don’t tap the link or pay the fee — paste the link into Scam Detective for an instant risk score first.

2Track any real parcel on the carrier’s official site (type it in) using a tracking number you got at checkout.

3Delete and report the text — forward USPS smishing to [email protected], then report it to the FTC.

How to spot the fake link

The domain isn’t the real carrier (usps.com, ups.com, fedex.com, dhl.com) — it’s a look-alike.

Odd endings like .top, .vip, .xin, .cc, .icu or a URL shortener that hides where it really goes.

Extra words bolted on — “usps-redelivery”, “usps-track”, “package-update”, “-post”.

You weren’t expecting a package, or the tracking number doesn’t match anything you ordered.

Not sure? You don’t have to eyeball it — paste the link above for a free 0–100 risk score, then unlock the full report with all five red flags and your 3-step plan for $4.99.

Is your brand being spoofed in scam texts?

Scams like this impersonate USPS, UPS, FedEx and DHL — but small and mid-sized brands get copied too. Our Brand Impersonation Audit researches the look-alike and typosquat domains impersonating your brand, with evidence and a risk rating for each, plus a ready-to-send takedown-request template. Two one-time tiers, no subscription.

Get a Brand Impersonation Audit — from $99

Audit ($99) or Audit Pro ($299) for a deeper, wider investigation · see a sample audit.