How to Protect Your Mail From Theft

Last updated 2 months ago. Our resources are updated regularly but please keep in mind that links, programs, policies, and contact information do change.

In November 2025, police in San Antonio arrested a man they say damaged nearly 130 mailboxes and stole mail from more than 80 people at a single north-side apartment complex. He told officers he was hoping to find credit cards in the stolen mail, according to the police report.

That is the shape of modern mail theft. Not a lone envelope lifted from one porch, but dozens of households hit at once, often through a broken cluster box or a stolen master key.

Much of what protects your mail is free and within your control. Collect mail the day it arrives, route sensitive items through secure channels, sign up for two free USPS services, and know exactly who to call in the first 24 hours if something disappears. The system has real gaps. Your habits close most of them.

Why Your Mailbox Is a Target

The U.S. mail reaches more than 170 million delivery points, according to USPS Postal Facts for fiscal year 2025, and carrier robberies and mail theft have been on the rise in recent years, per the Postal Service Office of Inspector General.

The scale is genuinely large. At least 58 million packages were stolen nationwide in 2024, according to a New York Department of State consumer alert citing Postal Service estimates. Citing Postal Inspection Service data, the federal-workforce publication FedWeek reported more than 800,000 mail theft complaints over three fiscal years.

Why the mailbox specifically? Because it holds things thieves can either sell or use to become you: checks, credit and debit cards, bank statements, and tax documents carrying your Social Security number.

Each of those is a building block for identity theft, and the Bureau of Justice Statistics tracks the damage through its Identity Theft Supplement to the national crime survey.

There is also a master-key problem. The OIG audit describes “arrow keys,” the universal keys that let carriers open centralized receptacles. Steal one, and you can open a whole bank of boxes at once.

Package theft follows a more visible logic. A 2025 Pinkerton analysis found that medium-sized, street-visible boxes with recognizable retailer branding are common targets, and that thieves rarely dig through storage bins or hidden corners. They take what they can see from the road.

The Daily Habit That Does the Most Work

If you do one thing, do this: bring your mail in the day it arrives.

Daily collection is a top recommendation under the Postal Service’s Project Safe Delivery initiative, and the reasoning is not complicated. The longer mail sits visible and reachable, the more chances a thief has to notice it.

San Antonio police made the same point to residents in neighborhoods where cluster boxes had already been hit: pick up mail on the day it is delivered.

Build it into a routine you already have. Check the box when you get home, not the next morning. In suburban and rural areas, check before dark, since much tampering happens at night when the street is quiet.

Outgoing Mail Deserves the Same Caution

An outgoing check in a curbside box with the flag up is a billboard. Thieves can see it, grab it, and get to work.

What they do next has a name: check washing. The OIG and USPS describe how criminals alter the payee or the amount on a stolen check, or use the account details to reach your money directly.

So do not leave outgoing mail in an unsecured residential box overnight. Drop it inside a post office, hand it to your carrier, or use an interior collection slot. For a check, paying online sidesteps the risk entirely.

For anything carrying a Social Security number, a tax return or a benefits application, use tracked methods and in-person drop-off where you can. If you must use a blue collection box, deposit close to the posted pickup time rather than the night before, since after-hours boxes have been targets.

Informed Delivery Is a Tripwire, Not a Lock

Informed Delivery is a free USPS service that emails you grayscale images of the front of your incoming letter-sized mail, plus status updates on packages. As mail runs through sorting machines, the front of each envelope gets imaged, and you see it in a daily digest.

Signing up takes a USPS.com account and identity verification, and notifications usually begin within three business days of enrollment.

Informed Delivery does not stop anyone from reaching into your box. What it does is tell you what should have arrived.

See a check or a card in the morning digest that never lands in your box that afternoon, and you have an early warning, especially if it happens more than once. That gap is your cue to call USPS or, if the pattern holds, law enforcement.

Two limits to keep in mind. Not every piece gets imaged, since large envelopes and items too bulky for the sorting machines can slip through. And some addresses are not eligible, particularly apartment buildings without uniquely coded mailboxes.

Locking Boxes, Cluster Units, and Who Pays

Upgrading the box itself helps, but the responsibility may surprise you.

A USPS spokeswoman told San Antonio TV station KSAT that customers are generally responsible for providing an appropriate receptacle, including its purchase, installation, maintenance, repair, and replacement. For apartments, that falls to property management or the HOA.

Translation: if you want a locking mailbox, you usually buy and install it yourself, as long as it meets USPS rules. A compliant box lets the carrier deposit mail through a slot without a key, while you unlock a secured compartment to retrieve it.

A lock raises the bar. It does not clear it. In neighborhoods where an arrow key has been compromised, individual locks do not matter, because the thief has legitimate access to the whole bank.

Cluster box units are expensive to replace, which is exactly why some local governments have started chipping in. San Antonio, for example, launched a pilot anti-theft mailbox program that uses city discretionary funds to match what neighborhoods spend on replacement mailboxes and security lighting.

Light and Sightlines Beat Cameras

This one runs against intuition, so name it plainly: the doorbell camera you bought may not be doing what you think.

The Pinkerton analysis found that doorbell cameras did not significantly deter package theft in the footage studied. Thieves took packages anyway. What mattered more was whether the box was visible from the street in the first place.

So Pinkerton’s practical suggestions lean on concealment: request delivery to a side or rear door, use plants or a column to block the porch from view, or set an empty storage bin on the porch to hide a package inside. Thieves generally do not search where they see no target.

Lighting works on the same principle. Some utilities offer overnight security-lighting programs that a resident or HOA can apply for, usually with the applicant covering the operating costs. A well-lit box is a less appealing one, and it helps neighbors spot tampering.

None of this means scrap the camera. Footage is valuable evidence after the fact, and police routinely ask for it. It is the deterrent claim that the research does not support.

The underlying idea has a name in the research: situational crime prevention, or designing spaces to make crime harder. A 2022 peer-reviewed analysis of the crime prevention literature centers on cutting off chances to steal by changing the surroundings, making targets harder to reach, and watching over them. For mail, that means less visibility, better sightlines for neighbors, and locks where locks help.

Protecting Mail While You Are Away

An unattended box that fills up for a week announces both that you are gone and that there is a lot to steal. Three USPS options cover most travel, and they fit different lengths of absence.

They compare like this.

Sources: USPS Hold Mail and USPS mailing standards. Premium Forwarding and PO Box pricing varies by location and box size.

Hold Mail for Short Absences

USPS Hold Mail is free and pauses delivery for a minimum of 3 days and a maximum of 30, with everything held at your local post office until you return.

Timing is generous. You can request a hold up to 30 days in advance or as soon as the next scheduled delivery day, as long as you submit before 3 a.m. Eastern on the day the hold should start, Monday through Saturday. That leaves room for a last-minute trip.

The process now requires you to create or sign into a USPS.com account and verify your identity before submitting online. If online verification fails, USPS points you to a location offering in-person Identity Verification Services.

Longer Trips: Forwarding and PO Boxes

Past 30 days, USPS steers you toward forwarding. Standard change-of-address forwarding reroutes most mail and often runs up to a year, though details and fees vary, which makes it clumsy for a trip that is not permanent.

Premium Forwarding Service is built for temporary moves. It bundles all your mail and ships it weekly to a temporary address, without changing your permanent address.

PO Boxes come up often for longer absences. One forum account described post offices declining to store held mail beyond 30 days, citing limited space, with the hold renewable but never accumulating more than 30 days at a time.

That is one customer’s account, not national policy, but it lines up with the 30-day cap USPS publishes. If you will be gone longer, the durable fix is a trusted person who empties held mail between hold periods, or a PO Box that keeps sensitive mail behind a locked lobby door.

Catching Theft Early

The first sign of stolen mail is often what does not show up.

If bills or statements you always receive stop arriving with no explanation, treat it as a possible interception rather than a fluke. Informed Delivery sharpens this: an imaged check or card that never reaches your box is a concrete discrepancy, not a vague worry.

Packages give you a timeline too. A tracking status of “delivered” with nothing on your porch or in your mailroom deserves a look. Check with neighbors and the building office first, since misdelivery is common, then escalate if it is genuinely gone.

Inspect the hardware. Pry marks, a broken lock, a door that no longer latches: report signs of tampering to your police department’s non-emergency line even if you cannot prove your own mail was taken, because damage often signals a wider problem. San Antonio police gave residents exactly that advice during the cluster-box wave there.

Some of the clearest signals come from the neighborhood, not your own box. The Stockton Police Department described a collaborative investigation that identified two people believed responsible for multiple thefts across specific neighborhoods. Individual residents may not have realized their missing mail was part of a pattern until the arrests. A neighborhood group or watch is how those dots get connected.

The First 24 Hours After a Theft

If mail is stolen, the response splits into three moves: stop the bleeding, report it, and lock down your identity. Do them roughly in that order.

Stop Further Loss

First, keep more mail from landing in a compromised box. Even if you are not traveling, a Hold Mail request pauses delivery while you fix a lock or a broken door, storing mail at the post office in the meantime.

If a cluster unit is damaged, your property manager or HOA owns the repair, per the USPS responsibility rule above. Push for a timeline, since KSAT reported that broken boxes can linger unrepaired and delay secure delivery for a whole building.

While repairs drag, ask your local post office about picking up mail at the counter, and consider a PO Box for anything sensitive in the interim.

Report It to the Right Places

The U.S. Postal Inspection Service investigates mail crime. Report suspected theft through its online complaint form or by calling 877-876-2455. If a postal employee may be involved, contact the OIG instead.

Two rules on urgency. Call 911 for a crime in progress, including a theft or robbery you are watching happen. Use the USPIS emergency line only for mail bombs or dangerous substances.

File a local police report too, especially when checks, cards, or identity documents were taken. In San Antonio, resident reports to the non-emergency line fed the investigation that led to the arrest of the man accused of hitting numerous victims.

One more, for the scam that follows physical theft. USPIS advises forwarding suspicious texts or emails about USPS or a “failed” package delivery to spam@uspis.gov, then deleting them.

Lock Down Your Credit

Because stolen mail so often becomes identity theft, protect your credit fast.

The Federal Trade Commission describes two tools. A credit freeze blocks new creditors from seeing your report, so no one can open an account until you lift it. It is free to place or lift and does not affect your credit score, which makes it worth doing even before any misuse appears.

A fraud alert is lighter. It tells businesses to verify your identity before opening credit, and you only need to contact one of the three bureaus (Equifax, Experian, or TransUnion), which must notify the other two. For documented identity theft victims, an extended alert can last seven years, and servicemembers can use active-duty alerts.

If misuse has already started, the FTC’s IdentityTheft.gov builds a personalized recovery plan, tracks your progress, and pre-fills the letters you need to send. Keep copies of any police reports you file; creditors and credit bureaus will ask for them when you dispute fraudulent debts.

Then keep watching. You are entitled to free credit reports from each bureau — now available weekly — through annualcreditreport.com or 1-877-322-8228. The Identity Theft Resource Center, a nonprofit founded in 1999, offers free help to victims navigating recovery.

Where Your Effort Runs Out

A 2023 USPS OIG audit found that the Postal Inspection Service lacked deployment timelines with actionable milestones for its security upgrades, and had insufficient accountability for arrow keys, the same keys thieves prize. The audit issued seven recommendations, including a finalized mail theft strategy, clearer arrow-key guidance, and specialized training for inspectors.

USPS has moved. Under Project Safe Delivery, it reported deploying about 15,000 hardened blue collection boxes since May 2023, ordering 8,500 more, and installing roughly 28,000 electronic locking mechanisms across all 50 states. In its March 2024 update, the Postal Service also reported 73 percent more arrests for letter carrier robberies in fiscal 2024 to date than in the same period a year earlier.

Electronic locks matter because they reduce the reliance on a physical universal key. A key can be stolen once and reused for months. A canceled electronic key cannot.

Not everyone is convinced the response matches the scale. FedWeek’s assessment argued that the Postal Inspection Service has failed to contain America’s mail theft crisis, basing the argument on that 800,000-complaint figure.

Your habits close the everyday openings, the overflowing box, the check with the flag up, the package visible from the road. What they cannot fix is a compromised master key or a cluster unit that stays broken for weeks. That part waits on timelines the audit says were not yet firm.

Our articles make government information more accessible. Please consult a qualified professional for financial, legal, or health advice specific to your circumstances.