What to Do About Stolen Mail

Last updated 2 weeks ago. Our resources are updated regularly but please keep in mind that links, programs, policies, and contact information do change.

You walk out to the curb and the little door on your mailbox is hanging open. Or you come down to the apartment lobby and the whole bank of cluster boxes has been pried apart, every compartment gaping, a few stray envelopes scattered on the floor.

The first feeling is usually a stomach drop, then a question: who do I even call about this?

The short answer, the one to act on before you do anything else: make three reports, fast, then move to protect your money and your identity. Call your local police for an on the record incident, file a mail theft report with the U.S. Postal Inspection Service, and, if you suspect a postal employee, file separately with the Postal Service’s Office of Inspector General.

You can file through the OIG Hotline at uspsoig.gov/contact-us, which the agency directs people to use for reporting mail theft or misconduct by a postal employee or contractor.

After that, you chase whatever sensitive items were inside and you put your credit on lockdown.

The hardest part for most victims is moving from shock into that sequence quickly. The federal tools exist, and they are built to fit together. They are almost never explained as one chronological path for the person standing over a busted mailbox at 7 a.m.

Mail Theft Is a Federal Felony, Even for One Letter

It surprises people that stealing mail is not a minor local nuisance on the level of a swiped lawn gnome. It is a federal crime with its own statute.

The law is 18 U.S.C. § 1708, titled “Theft or receipt of stolen mail matter generally.” The key part covers anyone who “steals, takes, or abstracts, or by fraud or deception obtains, or attempts so to obtain,” letters or packages from a mailbox, collection box, or mail route.

That wording covers the locked cluster units in apartment buildings and planned communities, not only the curbside box. It also covers items “left for collection upon or adjacent to a collection box or other authorized depository of mail matter,” meaning the envelopes you set out with the flag up.

The statute does not stop at the person with the crowbar. A separate clause makes it a crime to buy, receive, or conceal mail “which has been so stolen,” knowing it was stolen. The roommate sitting on a stack of pilfered credit cards is exposed to the same charge as the thief.

The penalty: a convicted offender “shall be fined under this title or imprisoned not more than five years, or both.” A 1952 amendment made it a felony no matter how little was taken.

So the theft of a single envelope with a medical bill inside is not legally trivial. It sits inside a felony framework Congress has kept on the books for decades.

That framework is exactly why this is not only a police matter.

Dena J. King, who served as U.S. Attorney for the Western District of North Carolina, put the stakes plainly in a public statement on rising thefts in her district: “Mail theft is not a victimless crime. Not only does it disrupt the delivery of important mail…” but it opens the door to financial harm that follows victims for months.

Porch piracy is the part that trips people up, because it is different. A package a carrier left on your doorstep may no longer sit inside an “authorized depository” of mail. Theft from a porch is usually handled under state and local theft laws, which means you still call local police. But the Postal Inspection Service may not get involved unless there is evidence the mail system itself was tampered with.

The distinction can feel arbitrary to a victim. A stolen box is a stolen box. It comes straight from the words Congress chose to mark where federal authority begins and ends.

Who handles what

Three different bodies can touch a mail theft case, and knowing which does what saves you from bouncing between phone trees.

Sources: U.S. Postal Inspection Service, USPS Office of Inspector General.

The Postal Inspection Service is the law enforcement arm of the Postal Service, whose job is investigating crimes that misuse the mail. It is less famous than the FBI, which is why so many people assume mail theft is purely a local matter and never report it federally. Its chief postal inspector, Gary R. Barksdale, has overseen all operations of the Postal Inspection Service since March 2019.

The Office of Inspector General is a separate watchdog. It handles misconduct from the inside: a carrier discarding mail, an employee skimming envelopes in a back room. Its contact page tells you to use the OIG Hotline to “report mail theft, destruction of mail, fraud, or misconduct committed by a Postal employee or contractor.”

You usually cannot tell from the outside whether a missing letter was grabbed by a stranger or vanished inside a facility. The practical move is not to figure out who has authority yourself. When employee involvement seems possible, file with both USPIS and the OIG so the right investigators see the case.

The First Hour: Safety, Then Reports

The opening minutes are confusing, and the temptation is to start digging through your records to figure out what is gone. Resist that until you have handled two things first: safety and the dated, on-the-record reports.

If a crime is unfolding, someone prying at boxes or threatening a carrier, the priority is not the postal hotline. The USPIS reporting page is blunt about it: “Call 911 to report an active crime in progress.” Local responders can reach a scene in a way a federal agency cannot.

The same page tells you that for a suspected mail bomb or hazardous material, you call the hotline and say “Emergency,” then call 911 if anyone needs medical attention.

Once nobody is in danger, document the scene before it changes. Photograph any damage to locks or doors. Note the date and the last time you saw the box intact. Write down sender names, expected delivery dates, and tracking numbers for anything you were waiting on.

If you live in an apartment, tell building management right away. Landlords often have their own duty to keep the boxes secure, and they may have lobby cameras or access logs that matter to investigators later.

Then make the reports. Contacting local police or your sheriff’s office is an early step when you suspect fraud, partly to create the paper trail a bank will ask for. A police incident number is the documentation financial institutions want when you later dispute a charge.

The federal report goes to the Postal Inspection Service. Its public guidance is direct: “If you believe your mail has been stolen, you should report it to the U.S. Postal Inspection Service by calling our hotline at 877-876-2455.” You can also use the online form, which lets you “Report suspected mail theft, and other mail-related crimes, tips or incidents” in your own words.

One honest caveat. USPIS does not promise to open a separate investigation into every single report, and it publishes no guaranteed response time. The agency says its inspectors “aggressively investigate mail theft incidents and letter carrier robberies” where patterns or severity warrant.

So why bother filing if you might never hear back? Because the report is how your incident lands in a federal system that scans for patterns. A cluster of thefts at the same set of boxes is the signal that someone is using a stolen master key, not merely grabbing one mailbox of opportunity.

The First Day: Chasing Checks and Stolen Refunds

By the end of the first day, you shift from general reporting to targeted recovery, sorted by what was in the box.

A stolen sale flyer is annoying. A stolen bank statement, tax form, or check is a different animal, because it hands a stranger account numbers and routing numbers.

If checks are missing, call the issuing institution the same day. There are tracing procedures, and in many cases the money can be replaced.

Federal tax refunds have their own well marked path. The IRS Taxpayer Advocate Service explains that if the “Where’s My Refund?” tool or the IRS2Go app shows a refund was issued but you never got it, the money may have been lost or stolen, and you can ask for a refund trace.

The timing rules matter, because the IRS will not start a trace until enough time has passed. They are worth keeping straight.

Source: IRS Taxpayer Advocate Service.

You start a trace by calling the IRS Refund Hotline at 800-829-1954, using the online tools, or, for certain statuses such as married filing jointly, by completing Form 3911, Taxpayer Statement Regarding Refund.

From there the Bureau of the Fiscal Service does the detective work. For a direct deposit, it sends a letter to the bank to verify where the money went.

For a paper check, it checks whether the check was cashed. If it was not cashed, you get a replacement. If it was, you receive a claim package to complete so a forged check can be sorted out.

Other government checks follow similar logic, though the steps vary by agency. Call the agency’s customer service or local office, say a mailed benefit check looks stolen, and ask to start whatever trace or replacement process it offers. Mention that you have already reported the theft to law enforcement.

If your stolen mail contained a Social Security card, a benefit award letter, or anything with your Social Security number, there is a specific next step. People who think they are identity theft victims are directed to “Report a stolen Social Security number to the Federal Trade Commission.” Which is the bridge to the next move.

Locking Down Your Identity

Stolen mail is a gateway crime. The envelope is rarely the prize; the account number, the address history, the Social Security number printed inside is.

The federal hub for what comes next is IdentityTheft.gov, run by the Federal Trade Commission. It frames recovery as “a process” that usually starts when you notice unauthorized accounts or charges, and it offers “step-by-step advice that can help you limit the damage, report identity theft, and fix your credit.”

The site is more than a brochure. You answer questions about what happened, and it builds a customized recovery plan.

While that plan comes together, the single most concrete defensive move is to control access to your credit file. There are two tools here, and they are not the same thing.

A fraud alert is the lighter touch. It “requires creditors who check your credit report to take steps to verify your identity before opening a new account,” adding an extra hurdle without shutting the door.

A security freeze, also called a credit freeze, is the heavier one. It blocks would-be lenders from seeing your file at all, which generally stops anyone from opening a new account in your name while it is in place.

Two reassurances, because people hesitate. A freeze does not touch your credit score. And it is free, by law: federal legislation requires the nationwide credit reporting companies to offer freezes at no charge.

The catch is that you have to set it up three times. You contact Equifax, Experian, and TransUnion separately. The timelines are written into the rules:

• A freeze requested by phone or online securely must be placed within one business day.
• A freeze requested by mail must be placed no later than three business days after the company receives it.
• The company must send written confirmation within five business days, including instructions for removing the freeze.

Removal is fast on purpose, because you will need to lift a freeze when you apply for a loan, an apartment, or a job. Request it by toll free phone or secure electronic means and the company must lift it free of charge no later than one hour later. By mail, the window is three business days.

The tradeoff is real and worth saying out loud: creditors typically will not extend credit if they cannot see your file. A permanent freeze means briefly lifting it on purpose every time you genuinely want new credit.

Then watch your reports. AnnualCreditReport.com is “the only website authorized to fill orders for the free annual credit reports consumers are entitled to by law.” All three bureaus have permanently extended a program that lets you pull each report once a week for free, a pandemic era change that stuck.

Certain situations entitle you to extra free reports beyond that: being turned down for credit (an ‘adverse action notice’), being unemployed and expecting to apply for employment within 60 days, being on public assistance, or having a report made inaccurate by fraud. In the weeks after a theft, this means you can watch your credit closely without paying a cent, which is how you catch a new fraudulent account before it spreads.

One more layer worth knowing about if tax records were in the mail: the IRS runs an Identity Protection PIN program, a number that blocks someone from filing a fraudulent return in your name.

A note on what comes next online. Cybercriminals send smishing texts and phishing emails impersonating package delivery notices — messages like “There is a package waiting for you at the post office” — and stolen mail can make those attacks more targeted and convincing. USPIS asks you to forward those to spam@uspis.gov and then delete them, rather than clicking, so its inspectors can track the campaigns.

Why the Mailbox Itself Stays Vulnerable

An uncomfortable backdrop sits behind all of this advice. You are the first line of defense not because the system wants it that way, but because the physical security of the mail has gaps that have been slow to fix.

The clearest example is the arrow key. That is the universal key a carrier uses to open an entire bank of collection boxes and outdoor mail equipment. Steal one, and you do not crack a single mailbox; you open dozens.

The Postal Service’s own watchdog has flagged this for years. An OIG review of the response to mail theft identified “much needed areas for improvement including the security of arrow keys, the keys used to unlock collection boxes and outdoor mail equipment.”

A follow up audit found that USPIS had built out a mail theft strategy, standard operating procedures, and a Mail Theft Analytics Program. It also found ongoing problems tracking and protecting arrow keys, inaccurate data about where collection boxes even are, and limited sharing of security information inside the Postal Service.

The point lands hard for a victim. Even as inspectors chase individual thieves, the master keys to the system remain a known weak spot.

Then there is theft from the inside. Postal police officer representatives have argued for structural fixes rather than case by case cleanup.

Publishing internal crime tracking and performance metrics has been raised as a transparency argument, alongside the case that returning visible Postal Police patrols to the streets is the real deterrent.

The independent reporting points the same direction without much subtlety. A report discussing a long delayed USPIS annual report, two years late by its account, described the postal system as “rife with crime,” while drawing on Inspection Service statistics rather than new data of its own.

Congress has started to circle the issue. A House Oversight hearing for July 23, 2025, titled “An Update on Mail Theft and Crime,” was announced as a way for Congress to explore concrete steps to “support mail carriers and combat theft.” The announcement’s framing, that “Mail theft is a serious crime that needs to be addressed and combated,” captures where the debate in Congress is headed.

None of which changes what you do tomorrow morning if your box is open. The hearings, the audits, the arrow key reforms move on a slower clock than your stolen tax refund does.

That is the real reason the sequence matters: report to all three channels, trace your checks, freeze your credit, watch your reports. Until the physical security of the mail catches up to the threat, the person standing over the broken box is the one who has to move first, and fast.

Our articles make government information more accessible. Please consult a qualified professional for financial, legal, or health advice specific to your circumstances.