USPS package alert texts are often scams that steal personal data through fake tracking links leading to convincing lookalike websites.

While the company is unsure of the scammers behind the plot, Google believes a host of those responsible are based in China.