Fraudulent websites are becoming more convincing than ever. Cybercriminals now use artificial intelligence, realistic branding, and fake login pages to create websites that closely resemble legitimate organizations.
According to Statista, more than 1 million unique phishing websites were detected worldwide during the first quarter of 2025, highlighting the growing threat posed by fraudulent websites.
Visiting these sites can result in stolen passwords, financial loss, identity theft, and the exposure of sensitive information.
The Postal Service™ is reminding employees and contractors to pause and think before clicking links or entering information online.
To help keep you safe online, the CyberSafe at USPS® team recommends the following:
n Type website addresses directly into your browser and bookmark trusted sites.
n Carefully review website addresses for misspellings or unusual characters.
n Stop and think before entering personal or work information online.
n Verify unexpected requests through a trusted source.
n Report suspicious websites, emails, or messages to the Cybersecurity Operations Center by emailing Cybersafe@usps.gov or calling 866–877–7247.
n Assume search engine results always lead to legitimate websites.
n Click suspicious links or scan QR codes from unknown sources.
n Enter your Employee Identification Number, password, or multifactor authentication codes on unverified websites.
n Ignore browser security warnings.
Remember: Just because a website looks legitimate does not mean it is safe. Taking a few extra seconds to pause before you click can help protect Postal Service information, systems, and operations.
For more information on the latest cybersecurity topics, go to the Monthly Campaign page on Blue at blue.usps.gov/cyber/communications.htm#accordion1s9 and the CyberSafe page on LiteBlue at liteblue.usps.gov/cyber/.
— Corporate Information Security Office,
Chief Information Officer, 7-23-26
