Smishing is when the scammer sends a text message purporting to be from a trusted entity, and then entices the victim by claiming they must provide them with a password, account number, debit card, or even social security number.  Oftentimes, the USPS smishing scam alerts the victim to an alleged delayed package, and then requires a purchase for updates.

In response, Nessel wants to remind residents of ways to protect their phone numbers and information:

• Don’t share your phone number unless you know the person or organization well.
• Don’t assume a text is legitimate because it comes from a familiar phone number or area code. Spammers use caller ID Spoofing to make it appear the text is from a trusted or local source.
• Don’t provide personal or financial information in response to the unsolicited text or at a website linked to the message.
• Don’t click on links in a suspicious text; they could install malware on your device or take you to a site that does the same.
• Don’t reply, even if the message says you can “text STOP” to avoid more messages. A response tells the scammer or spammer your number is active and can be sold to other bad actors.
• Never follow a text’s instructions to push a designated key to opt out of future messages.

This smishing scam is common and may look like the photo to the right. In addition to the sender’s email coming from a public domain instead of the organization’s domain, the suggested link does not match the public facing website for the USPS and there are typos throughout.