The USPS Mystery Box Scam Uses Fake Surveys to Steal Personal and Credit Card Information

A new phishing campaign is circulating that impersonates the United States Postal Service by offering a free USPS Mystery Box filled with lost or unclaimed mail items. The scam begins with a fake reward email that directs victims into a series of fraudulent survey pages. After answering a few simple questions, the victim is pushed to a fake product page and then to a phishing checkout form that collects full billing information. None of these pages are associated with USPS.

The email claims you have been selected for an exclusive USPS Mystery Box reward. It uses language designed to create excitement and urgency, encouraging victims to click through without stopping to verify whether the offer is real. The sender address appears as a string of nonsensical characters routed through unrelated domains and has no connection to the Postal Service.

The Scam Email

The message often includes the following claims:

• You have been selected to receive a USPS Mystery Box

These claims are entirely fabricated. USPS does not give away “lost item” mystery boxes, and it does not run promotional surveys that reward unclaimed packages.

The Fake USPS Survey Page

Once the victim clicks the link, they are taken to a counterfeit USPS themed survey page. The site displays the USPS logo, a date, and a progress bar. The questions are generic and unrelated to any real USPS promotions. Completing the survey only moves the victim further into the scam funnel.

The Fake USPS Mystery Box Reward Page

After finishing the survey, the victim is shown a page announcing their eligibility to receive a USPS Mystery Box containing lost or unclaimed items. The page uses urgency tactics such as countdown timers, limited availability notices, and highlighted expiration dates.

The Phishing Checkout Page

The final redirect takes victims to a fraudulent checkout page that displays a USPS Mystery Box product listing priced at $11.52. The page requests extensive personal and financial information, including:

• First and last name

Scammers use these details to commit credit card fraud, identity theft, and unauthorized subscription charges. The checkout form pretends to be secure by displaying fake security badges from McAfee, Norton, and TRUSTe, none of which are legitimate.

The Scam Domains

This scam uses multiple domains to avoid detection. The initial survey is often hosted at domains like vintagetshirtstore.shop or similar throwaway names. The final checkout page is frequently hosted on greatdealstoshare.com, a recently registered domain with no connection to USPS. These domains rotate regularly as part of a larger phishing network.

WHOIS records show that these domains were registered recently, use privacy shield services, and are hosted on infrastructure commonly abused in online scams. None of the domains are owned or controlled by the United States Postal Service.

Why This Scam Works

Scammers rely on the popularity of USPS and the public fascination with “lost mail” mystery boxes. The scam uses familiar branding, product photos, and legitimate sounding language. Urgency is created through countdown timers, low stock notices, and one day expiration claims.

• Brand familiarity increases trust

Red Flags in This Scam

• The sender domain does not belong to USPS

What To Do If You Receive This Email

• Do not click any links

USPS does not offer mystery boxes or giveaway programs involving lost or unclaimed packages. Any email claiming to provide such rewards is part of a phishing scam. For more scam alerts and cybersecurity guidance, visit the Botcrawl Scams section.