• Overview
    • Scam Map
    • Kill Chain
Recents

    Conversations will appear here

Technique

Change of Address Fraud

Also known as: Mail Redirect Fraud, USPS Address Fraud, Mail Forwarding Scam, Postal Address Fraud

COMPROMISE

Filing fraudulent USPS change-of-address forms to redirect victim's mail to attacker-controlled location, intercepting bank statements, new cards, and sensitive documents.

Common attack flows

How it fits in a scam

This technique shows up duringCOMPROMISE

Before

  • Credential TheftCOMPROMISE
  • Data Breach HarvestingTARGETING
  • Data BrokersTARGETING
  • Rental ScamDELIVERY
  • +5 more

After

  • Account TakeoverEXPLOITATION

Defense

How to defend against this

How to spot it

  • Unexpected USPS address change confirmation letter
  • Sudden drop in mail volume
  • Missing expected bills or statements
  • USPS Informed Delivery shows mail you never received

Tools you can use

  • Credit Monitoring ServiceCost medium · Effect high
  • Identity Theft Protection ServiceCost medium · Effect high

Further reading

  • Aura

    Comprehensive guide on change-of-address scams

  • IdentityIQ

    How criminals exploit USPS address changes

  • LibertyID

    Address change fraud as identity theft form

  • FTC

    Red flags rule on address change fraud

Related techniques

Variants

  • Identity Theft

Same stage

  • Credential Theft
  • SIM Swap
  • MFA Fatigue Attack
  • Clipboard Hijacking
  • Malicious App Installation
  • +9 more

Similar defense

  • New Account Fraud
  • Synthetic Identity Creation
  • Credit File Address Injection
  • Tax Identity Theft
  • Criminal Identity Theft
  • +3 more