Ask HN: How is this USPS 'incomplete address' scam supposed work?

3 points by dbtc 2y ago ↗ HN

I and others have received text messages like this:

> Your package has arrived but cannot be delivered due to incomplete information. Please confirm your address in this link. us415069620.4u6hip7s.co

That link is the latest one I've seen. It's behind cloudflare and it redirects to the actual usps.com home page, so did they set their scam up wrong, or am I missing something?

I've seen other ones where there is actually a fake USPS form to submit a corrected address and enter credit card info.

2 comments

[ 4.3 ms ] story [ 22.6 ms ] thread

orbz 2y ago ↗

They’ll often check the referrer or other information in the request to determine whether they should attempt the scam or redirect to an innocuous site to confound people investigating the scam.

dbtc 2y ago ↗

Ah, thanks.

I was hoping to send in a few (randomly generated) credit card numbers.

I did that with the simpler version from before; the posts were received anyway, though I don't know what happened beyond that.