LetterAgent

Mail physical letters by just asking your AI assistant.


Status: LetterAgent is currently in private testing ahead of public launch. Everything on this page describes the service as it works today.

Home > Guides > Clicked a USPS scam link

I clicked a USPS scam link. What do I do now?

Stop what you are doing: do not enter anything else on the page, and close it. Then work through the damage in order: replace any card you typed in, change every password you entered or reused, scan your device for malware, and freeze your credit if you shared identity details. Report the text to 7726 and the Postal Inspection Service.

What you gave themWhat to do, in order
Just clicked, entered nothingClose the page; check for downloads; run a security scan; forward the text to 7726
Card or bank detailsCall your issuer now and replace the card; review the next two statements line by line
Usernames or passwordsChange those passwords everywhere reused; turn on two-factor authentication
Name, address, SSN, or ID numbersFreeze your credit with the three bureaus; file a report at IdentityTheft.gov
Downloaded a file or appDelete it; run a full malware scan before logging into anything sensitive

What is the very first thing to do?

Close the page and enter nothing more. Every extra field you fill is more data handed to the scammer: name, address, card number, even a phone number "for delivery updates." If the page offered a file to download, often disguised as a tracking app or a delivery label, do not open it. Check your downloads folder: if something landed there, delete it without running it, then run a full scan with your phone or computer's security software before you log into your bank or email again. A click alone, with nothing entered and nothing downloaded, is low risk, but the scan is still worth the few minutes.

How do you handle stolen card details?

Call your bank or card issuer immediately and tell them the card number was entered on a phishing site; they will cancel the card and issue a new number. Ask whether any pending charges look unfamiliar while you have them on the line. Then watch your statements for the next two billing cycles: scammers often test a stolen card with a small charge before attempting a large one, so a tiny unfamiliar transaction is a warning, not a coincidence. If you entered online banking credentials rather than just a card number, change that password first, before the call, from a device you trust.

What about passwords and identity details?

Change every password you typed into the fake page, and every other account where you reused the same password, since credential stuffing (trying your stolen password on other sites) is automatic. Turn on two-factor authentication on your email and bank accounts: email is the master key, because password resets flow through it. If you shared a Social Security number, driver's license number, or similar identity details, freeze your credit with Equifax, TransUnion, and Experian. A freeze is free, it does not affect your credit score, and it blocks new accounts from being opened in your name. In the US, IdentityTheft.gov walks you through a recovery plan and generates the paperwork.

Who do you report it to?

Reporting helps investigators connect your text to a wider campaign. Forward the original text to 7726, the shared carrier spam-reporting code. File a report with the US Postal Inspection Service at uspis.gov, since the scam impersonates a federal agency. If money left your account, also file with the FTC at ReportFraud.ftc.gov. Keep the original text until you have reported it, then delete it. Do not reply to the scammer's number, and do not call any "support" number the fake page showed you: those lines are staffed by the same operation.

How do you avoid the next one?

Adopt one rule and the whole category dies: never click a delivery link from a text or email. Check packages by typing usps.com (or the carrier's site) into your browser and entering the tracking number from your order confirmation. Consider a password manager so every site gets a unique password; then a single phished password cannot cascade. And tell the people around you, especially older relatives: these campaigns disproportionately target people who are less sure what a legitimate carrier message looks like. A two-minute conversation is the cheapest protection there is.

Related guides

Ready to mail it? Send your letter with LetterAgent: describe it to your AI assistant, approve the exact quoted price, and it is printed and mailed.


LetterAgent is a working name. Prices include print, postage, and our service fee. US prices in USD, Canadian prices in CAD (Canadian prices exclude applicable sales tax, added at checkout). Currently in private testing.

Need help? Ask your assistant: it can check a job's status any time. If it ever can't handle something: hello@getletteragent.com

Privacy policy | Terms of service | Data processing