Mail Scams • Postal Phishing

What Are Mail Scams? Postal “Phishing” Explained

Postal phishing uses physical letters and “official” notices to steal money or personal information. Here’s how it works and how to stop it.

Quick takeaway
Don’t trust the phone number or website printed on a suspicious letter—verify it independently.

What is a mail scam?

A mail scam is a fraudulent letter, postcard, or document sent through the postal system with the goal of getting you to pay money, share personal information, or contact a scammer. Mail scams are sometimes called postal phishing because they use the same psychological tricks as email phishing—urgency, fear, authority, and “limited-time” pressure—just delivered on paper.

How postal phishing scams typically work

  1. They impersonate a trusted source (bank, government, utility, insurance, retailer).
  2. They create an urgent problem (past due bill, account issue, legal threat, verification request).
  3. They provide a direct path to the scammer (phone number, payment slip, QR code, or website).
  4. They pressure you to act fast before you have time to verify.

Mail scam red flags

  • Urgency: “final notice,” “pay today,” “immediate action required”
  • Unusual payment methods: gift cards, wire, crypto, prepaid debit cards
  • Requests for personal data: SSN, account numbers, login details
  • Threats of arrest, lawsuit, shutoff, or account closure
  • Contact info that doesn’t match official sources

The safest way to verify suspicious mail

Use a trusted source to verify: your official account portal, the number on your bill/card, or the company’s official website. Avoid using the phone number, QR code, or link printed on a suspicious letter until you confirm it’s legitimate.

Practice scam awareness

Practice Mail Scam Defense Use Scam Lookup

FAQ

Are mail scams still common?

Yes. Mail scams remain common because letters feel official and can target people who avoid online scams.

Should I scan a QR code on a suspicious letter?

Not until you verify the sender independently. QR codes can route you to malicious sites.