The week before Christmas is crucial if you’re sending packages or getting last-minute deliveries through the US Postal Service. But be careful because scammers will try to take advantage of you using text messages.

The USPS has delivered more than 7.4 million pieces of mail and packages this holiday season through Tuesday, according to its online tracker.

Consumers anxiously awaiting a package could be deceived by an unsolicited text message posing as a delivery update or a request for account information from the postal service. This type of text message could contain a web link and/or a phone number requesting a response.

If you have not signed up for a USPS tracking request for a specific package, postal officials strongly advise you not to click on the link or respond to the message.

When an unknown phone number sends a fraudulent text message designed to trick you into replying with your personal or financial information, this scam is known as “smishing.”

“These scammers often attempt to impersonate a government agency, bank or other company to lend legitimacy to their claims,” according to the U.S. Postal Inspection Service.

Using this fraud method, fraudsters seek personal information, including account usernames and passwords, credit and debit card information, Social Security numbers, and personal identification numbers.

“Scammers then get to work manipulating your personal information, which they can sell and/or use for other scams,” according to the Federal Communications Commission.

Read more: Column: ‘Tis the season for scammers, so here’s some advice: Never do business with strangers

If you receive a text message from an unknown number, from an agency you haven’t signed up for text alerts with, or that generally looks suspicious, it’s probably a scam, according to FCC officials.

As you wait for packages to arrive this holiday season, experts give you advice on how to avoid smishing scams and offer several tools to help you keep track of your packages.

How to avoid smishing scams

It starts with remembering that companies and government agencies generally don’t contact you to ask for your username and password information, FBI officials said.

If you receive a smishing message, experts say:

• Don’t answer. When you open the text message, do not click on a link, do not respond to the text message, or call a number you do not recognize. Even if the message contains the “SMS STOP” option to stop messaging, do not respond.

• If you want to check with the company/agency that the text purportedly came from, look for the customer service phone number or email on a receipt or on the company/agency’s website.

• Delete all suspicious texts.

• Protect any sensitive personal information – bank accounts, health records, social media accounts, etc. – by using multi-factor authentication to access these websites or accounts.

Also note that the post office will never send you an unsolicited text message about a package or mail item.

A suspicious text message from the “Postal Service”

There are various tools you can use to track a package in the mail.

When you ship a package, you will receive a receipt – either physical or emailed – with a tracking number that you can enter on the USPS delivery updates website.

You can also sign up for text tracking by sending an SMS to number 28777 and including your tracking number in the body of the message.

Read more: California’s secretary of state is among officials in 16 states receiving suspicious packages

USPS replies include the acronym “USPS,” the tracking number, when your package will be available for pickup, and the phrase “Reply STOP to cancel.” You will not be asked to respond.

To keep track of mail and packages being sent to your home, you can sign up for Daily Digest emails, which preview what’s arriving that day and when other items are expected to be delivered.

How to report a smishing scam

Report an email smishing scam to the USPS Inspection Service by sending an email to [email protected]. In the email, include your name and the following information:

• Copy and paste the suspicious text message into the email.

• A screenshot of the text message with the sender’s phone number and sent date.

• Provide all details e.g. B. whether you clicked on the link, whether you responded to the message with personal information, and whether personal or banking information was affected as a result of the fraud.

Once your email is sent, the inspection service will contact you if further information is required.

If you receive a smishing text message that purports to be from another government agency or retailer, you can report it online to the FCC – or in Spanish by calling (888) 225-5322 – or to the FBI’s Internet Crime Complaint Center .

FCC officials also recommend that you report the scam to your local law enforcement agency.

Sign up for Essential California to get news, features and recommendations from the LA Times and beyond delivered to your inbox six days a week.

This story originally appeared in the Los Angeles Times.