In recent weeks, a deceptive scheme has surfaced targeting online shoppers and those awaiting package deliveries. Centered around the tracking number “9300120111410471677883”, this scam specifically utilizes phony USPS notifications to catch its victims off guard. By presenting an urgent need to address delivery issues, it lures users to counterfeit USPS sites, cleverly designed to mimic the genuine platform, leaving many unaware of the trap they’re stepping into.
A typical 9300120111410471677883 USPS Redelivery Scam text reads as follows:
The USPS package has arrived at the warehouse and cannot be delivered due to incomplete address information. Please confirm your address in the link.
https://www.usps.surpport-page.com/
(Please reply to 1, then exit theSMS, open the SMS activationlink again, or copy the link toSafari browser and open it)
The US Postal team wishesyou a wonderful day!
These malicious actors have been sending unsolicited text messages, posing as USPS. The message typically indicates an issue with a package’s delivery, luring the recipient with a link that supposedly leads to the official USPS tracking page. The catch? The link redirects to a fake USPS website, cleverly designed to appear genuine. Here, users are prompted to ‘Schedule a Redelivery’, a trap set to harvest personal data, financial information, or even facilitate the download of harmful malware.
The URLs of these scam websites often resemble the authentic USPS site but contain subtle differences. Some examples include www.usps.surpport-page.com and usps.send-packing.com. These minor changes, often overlooked at a glance, are the gateways through which these cyber criminals operate, preying on unsuspecting individuals, and exploiting their trust in established institutions like the USPS.
VirusTotal flagged ‘usps.surpport-page.com’ as phishing and malicious:
Threat Summary
| Name | 9300120111410471677883 USPS Tracking Scam |
| Fake Tracking Number Used | 9300120111410471677883 |
| Initial Contact Method | Unsolicited text messages (SMS, Email) |
| Fake Website Appearance | Mimics the official USPS site |
| Common Fake URLs | www.usps.surpport-page.com, uspsehkz.top, uspen.shop, ar-postoffice.com, postalservice-address.com, tools.usps-find.com, tools.usps-trackingorder.com, usac.top, uspeb.shop, usahomi.top, usps-add005.top, uspsyapx.top, uspsvbxj.top, uspskp.com, usps.send-packing.com, usps.enter-tracking.com, tools.usps-packagestrack.com, uskhyh.top, uspsmn.com, tools.usps-ordersearch.com, uspex.shop, ususuua.top, uspsaar.top, usplve.top, etc. |
| Scammer’s Objective | Harvest personal data, financial information, or facilitate the download of harmful malware |
| Deceptive Technique | Notifies about a delivery issue, prompting users to ‘Schedule a Redelivery’ |
| Defensive Measures | Double-check URLs, avoid clicking on unsolicited links, manually enter the official USPS website |
| Recommended Action | Report the scam to the USPS and the FTC (Federal Trade Commission) at reportfraud.ftc.gov. |
| In-Depth Explanation Source | ‘USPS Redelivery Text Scam: What It Is and How to Protect Yourself‘ article |
Conclusion
It’s crucial now, more than ever, to approach digital notifications with a discerning eye and a healthy dose of skepticism. Before clicking on any links, especially from unsolicited messages, always double-check the URL, and when in doubt, manually enter the official USPS website into your browser. For an in-depth look into this malicious method and tips on how to protect yourself, we recommend reading the USPS Redelivery Text Scam: What It Is and How to Protect Yourself article. Stay safe and stay informed.
