Just hope that the ATM doesn’t have a skimmer attached.
I got this text a few moments ago:
USPS Delivery Anomaly Notification
Dear Customer: We have discovered that the delivery address you provided does not match the postal code recorded in our system. Therefore, the delivery scheduled for June 12, 2026, could not be completed. Your package is currently being held at your local U.S. Postal Service sorting center.
Please visit our portal within 24 hours to update your complete delivery address so we can reschedule the delivery:
Portal: https://us ps.rrd tms.life/delivery (I broke the link)
To reschedule the delivery, please follow these steps:
1. Reply to this text message with the letter “Y”.
2. Close and reopen this text message—the link will be active shortly.
3. If the link still does not open, please copy and paste it into your Safari browser.
Note: Your package will be held until June 14, 2026. If delivery is not rescheduled by this date, the package will be returned to the sender. Thank you for your understanding and support.
USPS Distribution Center
I thought Safari was an apple-only browser, which means I can’t use it; kinda surprised they chose that one. Can’t Chrome be used on Apple products? It can be used on both Android & Windows
As for only holding until June 14th, I know they hold registered mail for longer than that. Surely your scammer isn’t creating a false sense of urgency for you to act quickly w/o thinking as that would be unethical! 
Technically no. You can install Safari into Windows and use it. It was officially discontinued in 2012, and hasn’t had any sort of security updates or other updates to it, so I wouldn’t recommend it. But you certainly could use it.
Just as you could eat a tuna fish sandwich that’s a couple of months old…
I think the Facebook sellers are just a way to drive traffic to the obviously scam website, which was created on May 28th 2026.
It sure looks that way. I’ve found several other Marketplace ads with similar “deals” on this equipment, all also selling items supposedly available on the scam site. This is a more intricate scam than I usually see, though maybe I just don’t get around much
FB brushed off my report, said they didn’t find anything wrong with the ad. And of course you wouldn’t, unless you actually tried to purchase an item & were redirected. Clever!
I’ll also notice the contact info shows nothing but email addresses. That’s really unusual for a legitimate company to have neither a physical address, nor even a phone number listed.
Their ICANN registration redacts all of their company info, of course. Only contact info is for the Cloudflare host.
I noticed something very interesting though! There was one email address on the Contact Us page, which is a Gmail address: totogupton413@gmail.com
Out of curiosity, I looked it up in Google, and it led me to this contact page:
Strangely, that email address doesn’t appear on that page. But it might have been there at one time and cached by Google. Poking around the page, it looks like it’s pretending to be a web site for the recently-closed Joann Fabrics company, where it is getting rid of old stock. However, there are a ton of red flags. The contact info on that page has only email addresses, just like the “Propied” site. Also, there are mistakes on it; for example, the first line of that Contact Us page is:
At .%s we love every passion and interest on Earth because it is a reference to your UNIQUENESS. And to spread exactly that…is our core vision:
That “%s” bit looks like a placeholder from the template they used to generate this site that they forgot to fill in with the company name. Also, it looks incredibly similar to the Propied web site. It even has the same annoying pop-ups in the bottom-left corner of the site. And finally, I looked up Joann Fabrics in Google, and it led me to this page:
Which I’m pretty sure is the real web site. Actual contact info there, with addresses, phone numbers, etc. The email contact seems dodgy, because it’s a Gmail address, but just the same, it’s not actually trying to sell you anything, just a link to Amazon that searches for “Joann Fabrics”. So there doesn’t seem to be any means to scam anyone. It all makes sense for a site created by a retail chain that closed down. (And it makes it clear that they closed down after bankruptcy).
So, clearly, that “joannretail” site is a web site impersonating the real Joann Fabrics business, offering ridiculously low prices for items that are supposedly on clearance, where they will almost surely take your money and never pay. Also, the web site is only about a year old.
I found two other sites:
That link looked like it was supposed to go to a web site that sells HexClad cookware (extremely high-end stuff) but it’s now broken. My guess is that it got shut down after too many complaints.
The last site that was associated with that email address is this one:
When I visit that site, my browser’s security features immediately warn me that this looks like an impersonator web site.
This might not be the site you want
Hosted by https://mc4wu.com/
Does this address look correct? Some potentially harmful sites could impersonate the URL or content of legitimate sites.
What’s interesting though is that the Contact Us page has some actual info:
A street address in Arkansas and a phone number (which isn’t in Arkansas; it’s in Sinaloa, Mexico). And of course that same Gmail address as before.
Only thing I don’t get is who they are trying to impersonate. I tried looking up variations of “Mc Mu”, especially associated with swimwear, but I couldn’t find anything.
Clearly, this scammer is running multiple scams, and I think I only found a handful of them.
Wow, thank you for your powerful sleuthing! Interesting that they seem to be involved in the Joann scam too. I would be very careful about visiting “joanns-fabric, com” even though the site may look legit. As you note, Joann went bankrupt very messily and publicly last year ( JoAnn Fabrics - Wikipedia ) and around that time Facebook was infested with ads supposedly liquidating Joann stock at unbelievable prices. I’m not sure what happened to their inventory (it may have been sold to Michael’s) but there is no Joann Fabrics anymore and they don’t have anything to sell.
While I was aware of the large number of sleazy “discount” vendors, the use of fake FB Marketplace profiles to drive business to them indirectly is a new wrinkle to me.
They’re selling stuff on Amazon (which the legitimate site directs you to; they don’t sell anything on the site of course). That site that looks legit explicitly says Joann went bankrupt and doesn’t have anything to sell either in box stores or online.
Michaels does advertise some of the products Joann used to sell.
Scammer motherfucker from Ghana gets extradited to the U.S. to be prosecuted for his crimes. Sweet!
A Ghanaian social media influencer who is accused of running a scam that defrauded older Americans out of over $8 million by romancing them under false identities was extradited to the United States, his lawyer said on Friday.
Federal prosecutors had secured an indictment in December against the man, Frederick Kumi, charging that he was part of a criminal network devising romance scams.
The group created false identities using artificial intelligence software and used them to target older people on social media and online dating platforms, according to the U.S. attorney’s office of the Northern District of Ohio, which filed the charges.
If convicted, Mr. Kumi faces up to 20 years in prison, according to prosecutors.
Got a card today addressed to “Household Resident” saying “You’ve been selected to take part in a USPS survey, conducted by NORC at the University of Chicago.” Supposedly, if we complete the survey by recording the type of mail we send and receive for one week, we’ll receive $40.
This had a suspicious sound to it (is USPS really accelerating its financial losses by paying people for this info?), amplified by “The survey is only open for a limited time, so please log in soon!” and finding info online about survey scams designed to harvest your financial info. A complaint to the BBB reads “Please leave my family alone. We do not want to participate in the survey. Stop mailing, calling and sending people to my house. Take me off any list for future surveys. This has been going on for a year, take a freaking hint.”
On the other hand, NORC at U. of Chicago is apparently a legit organization, and says they are conducting a mail survey for USPS.
So, would we be risking dire consequences by going through with the survey, as long as none of our financial/bank info is transmitted?
It’s probably safe if the URL is uchicago.edu, norc.org, or uchicago.qualtrics.com, or something similar. If it uses a QR code, use an app that will show you the actual link instead of just going to it.
Also, if it is a legitimate survey from NORC, then it is probably going to have a page describing what kind of data they’re collecting, what they do with it, and any risks to you. Obviously that type of page is easy to fake, so the URL is what you want to see. They might use some kind of URL shortener so you don’t have to type something really long (one of those bit.ly things or similar). That is fine, just make sure that where you actually end up is affiliated with NORC.
It’s probably fine, but you can also lie if you’re still concerned. If you don’t want to give out possible financial information, then just don’t mention any letters related to financial companies you actually have a relationship with.
Also, no need to get all weird about giving out public information like your name and address. Because they sent you a letter, if it is a scam, then they already have that. If you’re hesitant about giving out an email address, then use one of the services that will let you generate a masked address.
If it were me, I’d not give out anything sensitive, but the deciding factor would be the amount of time spent responding versus the $40 reward. $40 might buy 20 minutes; maybe an hour if it’s actually interesting.
Got an e-mail responding to one I sent to NORC, that assures me it’s a legitimate survey.
So now all I have to do is e-mail them my date of birth, social security number, checking account and credit card info and forward a refundable $20 application fee, and I’m in!
Just kidding. Apparently it’s legit.
I’m suddenly getting text messages on my phone that contain what is supposedly a verification code for Uber. Thing is, I don’t have an Uber account, so it’s a scam. But I don’t understand what sort of scam it is. How does someone profit from this?
Or someone input the wrong number when they tried to sign up with Uber. Though as a potential scam/malware, it doesn’t matter who it claims to be from as long as you click something in the message.
I’ve definitely run into issues with both my work and personal phone where people who used to have my number are still using it for some businesses.
No scam, just carelessness.
Sufficiently advanced stupidity is indistinguishable from malice.
Less advanced stupidity leaves you wondering.
The reverse is also true as well.
I can’t prove it, but I suspect at some point my Social Security number has been … “compromised”. Don’t they have to automatically contact you? Somebody? Anyone, Buehler?
How did you find out?
Or “What makes you suspect that’s true?”
By the way, just got a text:
Hi, Dad. Sorry,I’m using someone else’s phone, mine died.
Can you text me right away at (phone #)? It’s kind of urgent.
None of my kids could type that much without a typo (that they can’t be bothered to correct), and NO ONE in my family would use a Heart Emoji un-ironically.