zucked
7 hours ago
I am pretty sure I bought from a seller using this (or something similar) on eBay. It sent me down a rabbit hole of reading about this type of scam that exploded earlier this year: https://www.uspsoig.gov/sites/default/files/reports/2026-04/...
Here's how it went down:
https://www.ebay.com/fdbk/feedback_profile/theperfectpart
Note that they’ve sold so much that even 1k neutral ratings are barely registering - they have “100% positive feedback”
I bought a cheap tool from this seller on ebay. Tracking number was provided showing my town as the destination. About four days later, I get an unprompted ebay message from the seller: “I monitor all my shipments and sometimes there are problems so I’m proactively sending you a new one, here’s a new tracking number.”
The original tracking number showed a message I’d never seen before “Item seized - counterfeit postage”. The new tracking number showed postage that had been bought back in January, but never entered the mailstream. Huh. I suspect that buys them time while they re-ship.
I did eventually get the item after another tracking number was provided.
My suspicion is that the seller uses counterfit USPS postage on 'x' number of packages to juice their margins. If you look at the neutral reviews, you can see a pattern — slow postage, lost package, had to replace, blah blah. Look at the positives — rave reviews at how fast things are arriving. Probably because the seller is “paying” for higher end postage via scamming the USPS.
And only when they get caught by USPS do they need to re-ship an item. They must get away with it enough to make it worthwhile
neilv
6 hours ago
Related: Not US postage labels, but suspicious US postage stamps, seemed to also be used as a crude currency.
A third-party seller on Amazon or eBay was including sheets of suspicious US postage stamps in product shipments, unsolicited, with full-color glossy notes offering more stamps in exchange for positive reviews.
(I took the stamps and note I received to a post office, where a manager agreed they looked suspicious, and I asked them forward it up the chain. I like the USPS as a trustworthy service and institution, and I hate counterfeiting.)
squirtle24
6 hours ago
It might have to do with the fact that the First Class stamps exploded in price recently. It was $0.55 right before covid, but now it's $0.82. It's like printing counterfeit money, except easier. A 4x5 sheet the size of a postcard becomes worth $16. The stamps themselves have relatively little in the way of counterfeiting measures, especially if you consider that "Forever" stamps exist. So even if they introduce anti-counterfeiting measures into new stamps, a pirate could print old-style Forever stamps, circumventing the new measures.
The USPS is also, ahem, rather incompetent, and their own report [1] shows that "mitigation efforts are limited, with no substantive approach to identify counterfeit stamps in the Postal Service network. While the Postal Service and the Postal Inspection Service have increased prevention-related efforts, the quantity of counterfeit stamps in the network remains unknown."
So the increased value of the stamps, the inability to change old Forever stamps, and the lack of enforcement have created a perfect storm for the counterfeiters.
[1] https://www.uspsoig.gov/reports/audit-reports/counterfeit-st...
alexfoo
5 hours ago
The UK moved to stamps with unique QR codes back in 2023 for the bulk of its stock.
https://www.royalmail.com/sending/barcoded-stamps
There are still some "Forever" stamps (those with pictures on or Christmas Stamps) but the old non-QR code non-forever stamps stopped being legal a while back (but you can always swap them for the new ones for free).
I've had people try and reuse a QR-coded stamp, you just get a postcard saying there's an item of mail with invalid postage for you to collect (and pay for). You get to look at it before you decide whether to pay the fine or not and then your argument is with the sender to reimburse you or not.
Barbing
42 minutes ago
> swap them for the new ones for free
This was almost my thought for mitigating USA stamp fraud. Exchange Forever stamps for $currentValue stamps, but show your ID so you’ll be subject to extra scrutiny if you try to trade in a million of them. (QR code’s better and more fair.)
sippingabonedry
4 hours ago
I thought "forever" referenced the Royal Mail's typical transit time.
saghm
6 hours ago
I thought that for a while now all stamps are "forever" rather than it being s separate type.
Ferret7446
an hour ago
Forever stamps guarantee delivery forever (subject to terms and conditions on weight/size). Regular stamps denote value, e.g. 50 cents. They will always be usable but you will need to match the inflation of prices (e.g., mailing a letter might be 50 cents in the past but 100 cents in the future)
Numbers for demonstration only
jffry
6 hours ago
USPS still sells denominated stamps from $0.01 to $10.00, in addition to "First Class Forever" stamps - see near the bottom of the filters sidebar on https://store.usps.com/store/stamps
ZeWaka
3 hours ago
There's also other types of forever stamps, such as the domestic Postcard and Global Forever stamp!
celticninja
5 hours ago
It's common in the UK to sell them both with a £ denominated value on them or the class of service. My brother bought loads of the latter a few years ago, which was a great idea, because as mentioned postal rates have increased significantly. The UK post office will also exchange your old unused stamps for new versions (now with QR codes or with sticky backs) for free. So even if they go out of date they alcan be upgraded at no cost.
scun
2 hours ago
I miss the taste of the glue.
kulahan
an hour ago
Fun fact: Charles Ponzi (yes, THAT Ponzi) got started buying and selling postage stamps via arbitrage. It was legal until he started doing some shenanigans regarding over-promised ROIs and needed to use new investor money to pay older investors.
He would buy a stamp in Spain for 30 centavos, then exchange it for a 5 cent stamp in the US. Spain’s currency was depreciating against the dollar, so you could make some surprising returns. Really, his numbers weren’t straight-up lies, it’s just that it would’ve been impractical at the time to transport enough stamps to make that payout occur.
xur17
6 hours ago
What was the end result of this?
cjbgkagh
an hour ago
They usually have someone on the inside they can contact to remove negative reviews, eBay doesn’t care because the high positive ratings means more sales which means more commissions.
landr0id
7 hours ago
Thanks for the links. I'm confused how this works and the USPS report seems to be heavily redacted around details.
I would assume that the tracking number has the address details tied to it (I mean, based on support claims with USPS it definitely does), but maybe there's some obscure package type where destination is not distinct and they abuse that in a pool with other sellers, then at the last mile it gets sorted appropriately?
Seems wild that this market even exists considering how USPS flat rate postage exists.
Was your package something heavy or extremely light which makes weight-based shipping more economical?
theturtletalks
6 hours ago
I’ve read about this. They basically reverse engineered how USPS creates the unique tracking number.
TemplarRush
6 hours ago
They aren't hard to generate. They give you how to generate them via their own documentation. It's just made up of an app ID, service type code, mailer ID, serial number, and check digit.
devy
5 hours ago
No. That won't work. Every carrier has it own way to generate tracking number. And that number must have registered in the carrier's database before it becomes "valid/sanctioned".
If you generate a random number even fitting the pattern and looks like a real one, the scan will fail with an error and fail to register tracking information every single step of the way that package gets scanned from dropoff at the retail postal office (this was the case) as bulk inbound pickup from USPS are only allowed for USPS verified partners.
Label creation (which generates the tracking number) is a billable action in their API. Some volume partners have pre-arranged/allocated tracking number segments assigned to the bulk volume partner/shipper (similar like how IP address v4 is assignment from IANA). And that pre-allocation tracking number range requires $$$$ contract in place. Billing that is post paid like cellphone bill.
Most retail shipping software (like shipengine, pirateship etc.) bills using the prepaid method, meaning you will have to pay for the label at the time label is generated.
Disclaimer: I used to work for a carrier that integrated a few dozens of global shipping carriers.
theturtletalks
5 hours ago
Yes, I’m deep in e-commerce and fraudulent labels are all over the place. Even Amazon, 3rd party sellers are using these fake labels to sell items for cheaper and win the buy box. Even UPS has this issue.
I get that they have reverse engineered how the numbers are created, but how are they showing up in USPS and UPS databases?
Are shipping platforms like shipengine getting these labels pre-made and this fake label seller has reverse engineered how these tracking numbers are created programmatically and are essentially using the ones allocated to these big shipping platforms?
devy
4 hours ago
And the only plausible way they got around is likely recycle previously used real tracking numbers because USPS is inept (the thing USPS has been constant and consistent is raising prices).
We would never know how since that's the part USPS redacted heavily.
I wish Anthropic/OpenAI FDE take over USPS IT altogether.
mmooss
4 hours ago
> how are they showing up in USPS and UPS databases?
Are you overestimating their validation capabilities? Maybe the validation just isn't that accurate or isn't always done, for efficiency.
I once desperately needed a (FedEx or UPS) package that was delayed. Tracking showed it in a facility about an hour away so I asked if I could pick it up there. I was told: 'It's not really there; our (customer-facing) tracking shows where packages should be.'
Their image of super-efficiency is for selling themselves. (If you are deep in e-commerce, you probably already know.)
theturtletalks
3 hours ago
Yeah USPS definitely reuses tracking numbers, but how were these guys able to overwrite the delivery address? I feel like this shouldn’t be possible unless they are inside the system.
xeromal
an hour ago
My guess is that the validation just validates the numbers which are old and valid and some automated system notices the label and routes it. I bet their system is a disjointed system and not set up in a way where every step checks every thing. It's very plausible it was home grown in such a way where its like this
dwd
an hour ago
Having a connection/s inside who are in on the game would make sense.
TemplarRush
4 hours ago
Correct, I was just pointing out how trivial it was to generate/counterfeit a USPS barcode. I also worked in shipping/logistics with heavy USPS integration, but it was dealing with bulk/volume labels, where we'd only get charged if the label was actually used (returns, etc).
zucked
6 hours ago
The redaction is frustrating, but I suspect the approach is still at least partially viable, so they aren't interested in giving a playbook for scammers to exploit.
The tool I bought wasn't what you'd think of as a small, inconsequential item. I'd wager it was ~2lbs and was a automotive brake bleeder in a blowmolded case. Probably the size of an old-timey encyclopedia. Cheaply made of course (almost certainly an aliexpress item). The seller I bought from has what appears to be an aliexpress dropshipping supply chain -- they buy the tool for $, ship from a US warehouse in Florida for $$.
behringer
2 hours ago
They get away with it long enough until the day they go to federal prison involving fraud across state lines. Definitely would not want to try it.
onemoresoop
7 minutes ago
Yeah, it's greed that does that to people.
what
7 hours ago
Why is that report so heavily redacted?
zucked
6 hours ago
There was recently an update report published that gives a little bit more information but is still heavily redacted. I presume some of these vectors are still viable for exploit. https://www.uspsoig.gov/sites/default/files/reports/2026-09/...
wbl
6 hours ago
Because the redacted bits tell you what the crooks are doing wrong.