Don‘t Fall Prey to Postal Job Scams: A Cyber Security Expert‘s Guide to Staying Safe

In my years working in cyber security, I‘ve seen countless people fall victim to increasingly sophisticated employment scams. Fraudsters are especially fond of impersonating government agencies like the US Postal Service, as these are trusted employers offering sought-after jobs with good benefits. In 2022 alone, over 18,000 employment scams were reported to the FBI‘s Internet Crime Complaint Center (IC3), with losses exceeding $68 million.

Postal job scams, which promise easy money for minimal experience, remain some of the most pervasive. They lure in desperate job seekers only to steal their money and sensitive data. Here‘s what everyone needs to know to avoid these insidious scams.

How Postal Job Scammers Operate

Scammers often obtain people‘s contact information from data breaches, purchasing email lists, or scraping public resumes. They then send out phishing messages advertising fake postal jobs with subject lines like "US Postal Service Hiring Now, No Experience Required!"

The email message will contain an external link to apply for the supposed job. But this link really downloads malware onto your device or takes you to a bogus site requesting payment for "application processing" or "exam prep materials." The scammers pocket the money and then disappear.

Other times, the scam sites ask for extensive personal info like your social security number and bank account details to "run a background check" or "set up direct deposit." In reality, the scammers use this to commit identity theft and drain your accounts.

Fraudsters also frequent online job boards and forums, posting fake postal job listings that appear alongside legitimate ones. A 2022 study by the Society for Human Resource Management found that 42% of US adults have seen a fraudulent job posting and 22% have actually applied to one.

Warning Signs of a Postal Job Scam

Spotting scam postal job listings takes a keen eye, as criminals have gotten quite good at making them seem convincing. Telltale signs of a likely scam include:

🚩 Requests for payment to apply, undergo a background check, or access study materials
🚩 Offers of employment without an interview or exam (real postal jobs always require these)
🚩 Recruiters that only communicate via email using non-official addresses (no @usps.gov)
🚩 Rampant errors in the job posting or email messages (legitimate listings go through editing)
🚩 Pressure to act immediately or risk losing the opportunity (scammers want you to act, not think)
🚩 Requests for sensitive data like your SSN or bank info before a formal job offer and onboarding

Additionally, if an unsolicited job offer sounds too good to be true, your instincts are probably right. Trust your gut and verify before proceeding.

How to Verify Real USPS Jobs

With scammers regularly impersonating real USPS hiring managers and posting on third-party job sites, it‘s crucial to verify all leads. Follow these steps to separate legitimate opportunities from scams:

1. Only apply to positions directly on the USPS careers site. If you find a promising listing elsewhere, cross-reference it against this official site.

2. Independently contact the USPS customer service line at 1-800-ASK-USPS to inquire about any unsolicited job offers you receive. Don‘t just call the phone number listed in the suspicious email or job post.

3. Check that the "From" field of email correspondence includes an official @usps.gov address. Examine URLs carefully too. Real USPS sites will begin with https://usps.com or https://about.usps.com.

4. Be wary of recruiters that only communicate via email or messaging apps. The real USPS hiring process involves face-to-face interviews at an official postal location. If the recruiter refuses to meet or video chat, that‘s a major red flag.

Protective Measures When Job Hunting

While you can never completely eliminate the risk of encountering job scams, you can reduce your odds of falling for one. Some protective steps I recommend:

• Set up a dedicated email address only for job searching. This keeps your primary inbox clear of spam and phishing attempts.

• Use a Google Voice number or apps like Sideline and Burner when communicating with unknown recruiters. Don‘t give out your real phone number until you‘ve verified the job and employer are legitimate.

• Never provide your birthday, social security number, bank account details, or copies of your ID/driver‘s license until you have a formal job offer letter. Even then, verify the employer and offer independently first. Real employers don‘t need this info just to interview you.

• Be judicious about the info you post publicly on social media and job sites. Scammers use these details to craft targeted phishing messages and tailor scams to your background.

• Maximize your privacy settings on job boards and sites like LinkedIn. Scammers scour these for targets.

• Consider using an identity monitoring service. These can alert you quickly if your sensitive data is found somewhere it shouldn‘t be.

If You‘ve Been Scammed

Even the most cautious job seekers may fall prey to a sophisticated scam. If you believe you‘ve been victimized:

1. Immediately report it to the US Postal Inspection Service, the FTC, your state attorney general, and your local police. Provide as much detail as you can.

2. If you gave payment info to the scammers, contact the relevant financial institutions to lock your accounts, dispute any charges, and replace cards.

3. For identity theft concerns, visit IdentityTheft.gov. You can report the crime and get a personalized recovery plan.

4. Place a free fraud alert on your credit reports by contacting any of the three credit bureaus (Experian, TransUnion, Equifax). Consider placing a credit freeze as well.

5. Alert your network. If you connected with or endorsed the scammer on social media or job sites, post an update warning others about the fraud.

The Bottom Line

Postal job scams will likely persist as long as people are in need of work. But by knowing the warning signs, using caution, and verifying potential employers, you can protect yourself from falling victim. If you do spot a scam, always report it. Together, we can make it harder for employment scammers to find their next victim.

Cyber security expert. 12 years experience. Focus on cloud data security. Anti-scammer activist.