BBB warns people to be on the lookout for text message scam

LANSING, Mich. (WILX) - You’ve probably gotten the message sent to your cell phone. People pretending to be from the United States Postal Service saying your package is stuck at the warehouse and can’t be released until you update your personal information.

This type of text message is a scam called smishing. The Better Business Bureau (BBB) is warning anyone with a mobile phone to be on the lookout for unsolicited text messages asking you to confirm personal information in order to receive your package.

The message will look like it’s from USPS, but it’s not. The unknown sender tells you that your package has shipped to the warehouse, but can’t be delivered unless personal information is provided. The BBB said the post office doesn’t request information through text.

“If you ever receive a text message regarding any sort of shipping issues, you should always go directly to the source,” said Katie Grevious with the BBB.

She said it is not a new scam. “We’ve seen it around for, at least, a year or two.” Grevious is not just familiar with text scams going around, she’s getting the messages too. She said if you receive a text from the United States Postal Service, do not respond or click on any links.

Grevious recommends “[going] into one of their offices and talk to them directly. Don’t click on any links, don’t call any phone numbers. They’re not going to ask you to enter personal, sensitive information like user-names and passwords or payment methods.”

Andrew Brandsasse, Postal Inspector Team Leader at the U.S. Postal Inspection Service said in a statement:

“The U. S. Postal Inspection Service is the law enforcement arm of the U.S. Postal Service charged with supporting and protecting the Postal Service’s employees, assets, infrastructure, and customers. One way we strive to protect postal customers and the American public is through our investigation of cybercrime, including scam emails and text messages. Prevention and being proactive are among the best ways to protect yourself from cyber criminals, such as:

• Do not give out sensitive personal information via text or email unless you initiate contact with what you know to be a legitimate entity; USPS will never as for such information electronically.
• Likewise, do not click on suspicious links, even if they are purportedly from a legitimate source. Before clicking any links, review the message for bad spelling or poor grammar, which are often indicators of fraudulent activity.
• Keep anti-virus software on your computer up to date, as well as software on your mobile devices.
• Ignore instructions to go to an unfamiliar website.
• Ensure any website using your financial information is encrypted.
• Always use strong passwords; the strongest passwords use a combination of uppercase and lowercase letters, numbers, and special characters.
• Please report any suspicious cyber activity involving USPS by sending an email to cbyercrime@uspis.gov.
• You can also report fraud or any other issues by visiting our website at www.uspis.gov or calling us at 877-876-3455.”

Grevious recommends, even if you are expecting a package from UPSP, to track it through the retailer’s website. She said a shipping link or tracking code that appears to be from the post office can easily be faked. She said it’s also recommended to not call the customer service number listed in the text.

“Maybe do a little extra research before you call that number. Don’t just take it at face value because scammers create fake customer service numbers all the time and will pose as those companies to give a false sense of security and then ask for that sensitive information.”

The BBB said the blocking or adding your number to the “do not call” list won’t stop scammers from reaching out. To report USPS related smishing, send an email to spam@uspis.gov.

• Without clicking on the web link, copy the body of the suspicious text message and paste into a new email.
• Provide your name in the email, and also attach a screenshot of the text message showing the phone number of the sender and the date sent.
• Include any relevant details in your email, for example: if you clicked the link, if you lost money, if you provided any personal information, or if you experienced any impacts to your credit or person.
• The Postal Inspection Service will contact you if more information is needed.
• Forward the smishing/text message to 7726 (this will assist with reporting the scam phone number).

You can find more information here.

Subscribe to our News 10 newsletter and YouTube page to receive the latest local news and weather.