USPS package alert texts are often scams that steal personal data through fake tracking links leading to convincing lookalike websites.