Management Alert - Active Smishing Campaign Masquerading as the U.S. Postal Service

During our audit of the Integrity of Postal Service’s Social Media Presence, we found a smishing campaign that may have a significant negative impact on the Postal Service’s brand, reputation, and customer loyalty. The purpose of this alert is to bring this issue to your attention with a recommendation for corrective action. Smishing is a mobile phishing attack that targets victims using text messages rather than emails. These messages appear to be sent by legitimate, trusted organizations like the Postal Service. Smishing attacks attempt to trick mobile users into clicking on links that are connected to fraudulent sites that could steal credentials or propagate malware.