Exploring Package Tracking Smishing Scams | Huntress

This report explains a prevalent smishing package-tracking scam in which attackers send urgent USPS-themed texts that link to a convincing spoofed site to collect personal details and payment data, then trigger repeated “card declined” errors to harvest multiple cards; it highlights red flags (unfamiliar domains, grammar issues, urgency, foreign sender codes) and recommends defenses such as not clicking message links, independently navigating to official sites, verifying tracking numbers, and promptly disabling compromised cards and rotating credentials if exposed.