AAFMAA Mortgage Services LLC (AMS) is warning homebuyers about an increasingly common and sophisticated type of scam: fake US Postal Service (USPS) text messages designed to trick people into revealing sensitive financial information.

“Scammers know that when someone is in the middle of buying a home, they’re managing a lot of moving parts and may not stop to second-guess every message that pops up on their phone,” says Rob Greenbaum, Chief Marketing Officer at AMS. 

“Scammers can exploit that moment of distraction or urgency. A single click can open the door to identity theft, financial fraud, and stolen home funds.”

Related: How to Protect Yourself from Rental Scams

A Threat in Plain Sight

Over the last year, federal authorities have issued repeated alerts about fake delivery text messages that appear to come from the USPS. These scams typically arrive as a simple, believable message: “Your package is waiting for delivery. Click here to schedule or confirm.”

For someone in the middle of a home purchase, a message like that might not raise any alarms. That’s exactly what the scammers are counting on. The text includes a link to a fake USPS website. Often indistinguishable from the real one at first glance, the website may have a nearly identical URL, a convincing logo, and professional-looking language. 

Once clicked, the site prompts users to “confirm” personal details or make a small payment to release the package. This is where the danger begins. Entering credit card information, banking credentials, or a Social Security number hands over valuable personal data directly to criminals.

Unlike random spam messages, these scams are “targeted” to the homebuyer and can include phone numbers and personal details taken from real estate listings, mortgage applications, or online forms. Homebuyers, already expecting delivery notifications for documents, moving boxes, or home goods, are especially vulnerable.

Related: How to Avoid Mortgage Scams

Why Homebuyers Are Prime Targets

During a real estate transaction, homebuyers typically provide sensitive financial information to many entities, including lenders, title companies, and utilities. 

While legitimate companies work hard to protect data, cybercriminals often exploit weak points in the process. They know buyers make large wire transfers for down payments and closing costs. They know buyers are receiving legitimate texts from shipping services and contractors. And they know that many of those buyers are managing deadlines, emotions, and dozens of digital messages each day.

“These criminals don’t need sophisticated hacking tools to succeed,” Greenbaum explains. “They just need to look convincing enough to get you to click.”

Related: How to Do Your Homework on School Districts

How the Scam Works

The typical USPS text scam follows a familiar pattern. 

• First comes the bait: a short, friendly message notifying you of a delivery issue or package delay. The wording may vary, but it usually includes a prompt to click a link to “resolve” the problem.
• Next comes the fake website: This site mimics the look of USPS, often using slight variations in spelling or domain extensions. It might ask for your name, address, and payment details for a small “redelivery fee.”
• Finally, there’s the harvest: Once your information is entered, scammers can use it to commit fraud, open accounts in your name, or sell your data on the dark web. In some cases, malware is also downloaded to the victim’s device, allowing scammers to monitor further activity — including online banking or mortgage accounts.

This tactic, known as smishing, is a form of phishing that uses text messages instead of email. And it’s growing fast. According to the Federal Communications Commission (FCC), consumers reported $470 million in losses from scams that began via text messages in 2024.

The High Cost of One Click

For a homebuyer, the consequences of falling for this kind of scam can be severe. Stolen personal information can lead to fraudulent accounts, identity theft, or even intercepted down payments if criminals gain access to financial credentials.

Wire fraud is already a major threat in real estate transactions, and smishing scams often serve as the first step in a larger chain of fraud. Once scammers have your data, they may impersonate your title company or lender in future messages, issuing fake instructions to redirect closing funds to their own accounts.

Losing those funds can delay — or completely derail — a home purchase. Even when the money can be recovered, the stress and disruption can be overwhelming. That’s why prevention is far more effective than damage control.

Red Flags to Watch For

Spotting a USPS text scam often comes down to recognizing subtle warning signs. Real USPS messages will never include a generic link or ask for sensitive personal information. Here are common signs of a fraudulent text:

• A message that arrives unexpectedly, especially if you’re not waiting for a package.
• A link that looks slightly “off,” often using extra characters, abbreviations, or unfamiliar domain endings.
• Language designed to create urgency, like “final notice,” “your package will be returned,” or “confirm immediately.”
• Requests for payment information to “release” or “redeliver” a package.
• Poor grammar, strange phrasing, or inconsistencies in branding.

Even when a message looks legitimate, it’s safer to navigate directly to the USPS website or use a verified app rather than clicking any link in a text. Of course, you can also contact the USPS directly to confirm the legitimacy of any communication you’ve received.

Protecting Yourself

The first line of defense is knowing these scams exist. If you receive a suspicious delivery text, the best course of action is to delete it immediately. Do not click the link, and do not reply.

Greenbaum urges homebuyers to create a “pause moment” before acting on any message. “Take a breath. If something feels off, verify it through official channels. A 30-second delay can save you thousands of dollars and a lot of heartache.”

It’s also wise to keep your phone number and personal details as private as possible during a home purchase. Be cautious about where you enter your contact information online. You can even set up a dedicated email address and phone number just for your real estate transaction to minimize exposure.

For added protection, enable two-factor authentication on financial accounts and use strong, unique passwords. If you suspect your information has been compromised, contact your bank or credit card provider immediately and place fraud alerts with the major credit bureaus.

Reporting Scams

If you receive a fake USPS text, report it to the United States Postal Inspection Service (USPIS)  and forward suspicious messages to 7726 (SPAM). You can also report smishing scams to the Federal Trade Commission (FTC).

If you’ve already clicked a fraudulent link or entered personal information, act quickly. Contact your financial institution, update your passwords, and consider freezing your credit to prevent new accounts from being opened in your name. Time is critical, and a rapid response can help limit the damage.

We’re Here to Help

Thinking about buying, ready to start home-shopping in earnest, or considering a refinance? An AMS Military Mortgage Advisor, a licensed mortgage loan originator, will be happy to provide you with an honest and fair comparison of your mortgage options, including a wide range of affordable mortgages designed to meet your needs.

Ensuring Armed Forces Mutual Members obtain the best mortgage possible is our mission. Get your free mortgage assessment today or give us a call at 844-422-3622!