SCAM ALERT · JUNE 25, 2026 · 3 MIN READ
Welcome to Issue #1. Every week I break down one real scam, show you exactly how to spot it, and give you a link to test your instincts. Takes 3 minutes. Could save you thousands.
The sender is a random 10-digit number
USPS texts come from 5-digit short codes like 28777 — never a regular phone number with an area code.
The domain is a lookalike
The real USPS is usps.com. "usps-redelivery-center.net" was registered last week by scammers. Always check the actual domain before clicking.
The 24-hour deadline
Urgency is the scammer's #1 weapon. They need you to panic and click before you think. Real USPS holds packages for 15 days — not 24 hours.
WHY IT WORKS
Almost everyone is expecting a package. The timing feels personal. And "incomplete address" triggers just enough doubt — did I enter my address wrong? — to make you click before you think. That half-second of doubt is worth billions to scammers.
TEST YOURSELF
Think you can spot the next one?
Take the free PhishIt challenge →Free · No download · 3 minutes
STAT OF THE WEEK
318%
increase in smishing attacks in 2025.
1 in 5 Americans clicked a fraudulent text link last year. Source: Proofpoint State of the Phish 2025
Forward this to one person you're worried about. A parent. A coworker. Someone who would actually click that USPS text.
That forward is the whole reason I built this.
— Darien
Founder, PhishIt