by Eddie Aveitia, NERC CIP Reliability Specialist

Cybercriminals are using a new tactic to trick you into revealing sensitive information. A recent smishing scam involves a text message claiming to be from the U.S. Postal Service (USPS), stating that a package cannot be delivered due to an incomplete address. The message includes a PDF attachment that directs you to a fake USPS webpage, where you’re asked to enter personal and financial details.

The Truth: There is no package, and the webpage is controlled by scammers. If you enter any information, it will be stolen immediately.

Protect Yourself:

• Be Cautious with Unsolicited Messages: Avoid responding to unexpected texts from unknown numbers. If unsure, delete or report them.
• Don’t Engage: Never reply to suspicious messages, even to unsubscribe. Instead, contact your local post office directly for delivery inquiries.
• Avoid Suspicious Links and Attachments: Never click on attachments or links from suspicious texts or emails.

Stay vigilant and keep your personal data safe!