HACKER Q&A
📣 dbtc

How is this USPS 'incomplete address' scam supposed work?


I and others have received text messages like this:

> Your package has arrived but cannot be delivered due to incomplete information. Please confirm your address in this link. us415069620.4u6hip7s.co

That link is the latest one I've seen. It's behind cloudflare and it redirects to the actual usps.com home page, so did they set their scam up wrong, or am I missing something?

I've seen other ones where there is actually a fake USPS form to submit a corrected address and enter credit card info.

  👤 orbz Accepted Answer ✓
They’ll often check the referrer or other information in the request to determine whether they should attempt the scam or redirect to an innocuous site to confound people investigating the scam.