During the festive season, it’s a time for sharing, but sadly, it’s also a peak period for scams.

The U.S. Postal Inspection Service is urging customers to be vigilant about common scams while sending and receiving gifts this season. One prevalent fraud is “smishing,” which entails fake text messages related to package tracking. Customers should steer clear of unknown texts with suspicious tracking details and links to protect their personal information from scammers.

Are you unfamiliar with smishing? Here’s a quick primer on what it is, how to stay protected, and what genuine tracking messages from the USPS look like.

What is smishing?

Smishing is a type of phishing where fraudulent messages are sent pretending to be from trustworthy organizations to coax individuals into revealing personal or financial information, like social security numbers, credit card details, or account passwords.

Smishing specifically utilizes text messages to carry out the scam.

A smishing victim typically receives a misleading text from a scammer pretending to be a legitimate institution, such as a government agency, bank, or the USPS.

Does the USPS send tracking text messages?

Indeed, the USPS provides text message tracking for packages, but customers need to opt-in for this service. According to the U.S. Postal Inspection Service, they do not send tracking texts or emails unless requested by the customer first.

What do USPS package tracking texts look like?

USPS tracking texts may differ based on the details requested; however, they generally contain the following:

• Tracking number
• Status of the package
• Date, time, and location
• Instructions for opting out of future messages

For instance, a typical delivery expectation text could read: USPS 01123456789123456789, Expected Delivery by: Monday, September 11, 2017 Reply STOP to unsubscribe.

Importantly, USPS tracking texts do not include any clickable links.

How can you request text tracking from the USPS?

To request text message tracking, send your package’s tracking number to 28777 (2USPS). You will receive a text reply with the latest tracking update for your package.

For more detailed tracking information, send the tracking number along with specific USPS keywords to 28777. These keywords indicate the specific information being requested, such as expected delivery date or package availability for pickup.

A complete list of keywords can be found on the USPS website at usps.com/text-tracking/welcome.htm.

What to do if you get a smishing message?

If you suspect that you’ve received a bogus message pretending to be from the USPS, report it via email to spam@uspis.gov. Here are the steps to take to file a report:

• Without clicking any links, copy the message content and paste it into a new email.
• Attach a screenshot of the text with the sender’s phone number and date of receipt.
• Include your full name in the email.
• Add any additional relevant details, such as if you clicked the link and provided personal information or lost money.
• Also, forward the text to 7726 (SPAM).

The U.S. Postal Inspection Service will reach out to you if they need more information.

If you receive a smishing message unrelated to the USPS, forward it to 7726 and report it to the Federal Trade Commission or the FBI’s Internet Crime Complaint Center.

Other holiday mail scams to be aware of

Another scam to watch out for during the holidays is known as brushing.

Brushing occurs when a person receives a package containing items that they did not order or request. Although the package may be addressed to the recipient, it usually lacks a return address. Scammers use brushing to create the illusion that the recipient is an actual buyer who has left positive reviews online. Hence, the scammer can post fake reviews using the recipient’s name, falsely boosting product ratings.

While it may seem like a victimless crime, brushing can mean that the recipient’s personal information was compromised. Moreover, phony reviews can mislead others into purchasing substandard products.

If you suspect you’re a victim of brushing, there are steps you can take. If the package is unopened, you can write “RETURN TO SENDER” on the box, and the USPS will handle it at no cost. You may also choose to discard the package or keep the contents if you like what’s inside, as it’s legal to keep unwanted items received in the mail.

Above all, change your online passwords, monitor your accounts for unusual activity, and inform the relevant authorities.