A drop address becomes illegal when it’s used as a tool in a crime — receiving mail or packages tied to identity theft, mail or credit card fraud, money laundering, drug trafficking, or stolen goods. Renting a PO box or private mailbox in your own name for privacy or business use is lawful. What matters is intent and what actually passes through the address. Federal mail fraud alone carries up to 20 years in prison, and several other statutes stack on top when a drop address plays a role.
What a Drop Address Is
A drop address is any location used to receive mail or packages that isn’t your primary home or business. The three common forms are a PO box rented from USPS, a private mailbox (PMB) rented from a Commercial Mail Receiving Agency, and a virtual office address from a commercial provider.1United States Postal Service. Commercial Mail Receiving Agency (CMRA) All three create separation between where your mail lands and where you actually are. That separation is useful for privacy, travel, and business. It’s also what makes drop addresses attractive to criminals.
The Point Where It Crosses the Line
The address itself isn’t banned. Prosecutors look at what the address is being used for. Four patterns account for most criminal cases.
Identity Theft and Mail Theft
Criminals use drop addresses to intercept other people’s mail — bank statements, credit card offers, tax documents, benefit checks. Sometimes they file a fraudulent change-of-address form to reroute a victim’s mail. Sometimes they open new accounts in a stolen name and list the drop address for correspondence. Either way, the mail arriving at the drop gives them what they need to drain accounts, open credit lines, or file fake tax returns.
Stealing or fraudulently redirecting someone’s mail is a federal crime carrying up to five years in prison.2Office of the Law Revision Counsel. 18 USC 1708 – Theft or Receipt of Stolen Mail Matter When the scheme involves using someone else’s identity during a felony, aggravated identity theft adds a mandatory two-year sentence that runs consecutively — stacked on top of any other sentence, with no possibility of running concurrently.3Office of the Law Revision Counsel. 18 USC 1028A – Aggravated Identity Theft
Mail Fraud and Credit Card Fraud
Online scammers routinely ship goods bought with stolen credit card numbers to drop addresses. The address gets used for one batch of deliveries, then abandoned before investigators can connect it to a real person. The same pattern shows up in electronics theft rings and counterfeit merchandise operations.
Using the mail to carry out a fraud scheme is punishable by up to 20 years in federal prison. If the fraud targets a financial institution, the maximum climbs to 30 years and a $1,000,000 fine.4Office of the Law Revision Counsel. 18 USC 1341 – Frauds and Swindles Separately, using stolen credit card information to obtain goods is access device fraud, which carries up to 10 years for a first offense and up to 20 years for a repeat offender.5Office of the Law Revision Counsel. 18 USC 1029 – Fraud and Related Activity in Connection With Access Devices
Money Laundering
Criminal operations use drop addresses to set up shell businesses that process fraudulent transactions. The address lends an appearance of legitimacy to a company that exists only on paper. That’s often enough to open bank accounts, receive payments, and move money through the financial system before it disappears. Federal money laundering carries up to 20 years in prison and a fine of up to $500,000 or twice the value of the laundered funds, whichever is greater.6Office of the Law Revision Counsel. 18 USC 1956 – Laundering of Monetary Instruments
Drug Trafficking
Drop addresses serve as delivery points for narcotics ordered through darknet markets or shipped through the mail. Traffickers use vacant homes, short-term rentals, or rented mailboxes to receive packages of controlled substances while keeping distance between themselves and the delivery location. The Postal Inspection Service actively investigates drug shipments routed through the mail, and a single intercepted package can unravel an entire distribution network.
Reshipping Scams: When You Become the Drop Without Knowing
Most ordinary people who end up facing drop-address charges got there through a reshipping scam. The setup looks like a job offer. Someone contacts you through a job board, social media, or a dating app and offers easy money for receiving packages at your home and forwarding them to another address, often overseas. The job title sounds legitimate: “delivery operations specialist,” “quality control manager,” or “logistics coordinator.”7Federal Trade Commission. Can You Unbox the Signs of a Reshipping Scam? What’s actually happening: you’re receiving merchandise bought with stolen credit cards, repackaging it, and shipping it beyond the reach of U.S. law enforcement.8United States Postal Inspection Service. Be Smart: Reshipping Scams
The FBI is blunt about this: acting as a money mule is illegal and punishable even if you don’t know you’re committing a crime. People drawn into reshipping schemes can face federal charges for mail fraud, wire fraud, bank fraud, money laundering, and aggravated identity theft.9Federal Bureau of Investigation. Money Mules Beyond criminal exposure, you may be held personally liable for repaying victims whose stolen funds bought the merchandise you forwarded.
Signs a package-forwarding opportunity is actually a reshipping scam:
- The employer contacts you out of the blue and asks few or no questions about your qualifications.
- All communication happens over email, messaging apps, or text, and you never meet anyone in person.
- Packages arrive from retailers or individuals you don’t know, often addressed to names you don’t recognize.
- You’re told to remove packaging and receipts before shipping, which breaks the chain of evidence.
- Shipping labels or postage are provided for you. The Postal Inspection Service warns that criminals often supply counterfeit postage.8United States Postal Inspection Service. Be Smart: Reshipping Scams
- Destinations are international, especially Eastern Europe or Southeast Asia.
If you realize you’ve been recruited into one of these schemes, stop forwarding packages immediately. File a complaint with the FBI’s Internet Crime Complaint Center at ic3.gov and contact your local Postal Inspection Service office. Reporting on your own initiative is the strongest evidence of good faith if questions come up later.
How to Keep a Drop Address on the Legal Side
Federal regulations make anonymous use of a private mailbox essentially impossible. To rent a PMB at a CMRA, you must complete USPS PS Form 1583 and provide two forms of identification. One must be a government-issued photo ID — a driver’s license, passport, military ID, or permanent resident card. The second must verify your physical home address, such as a current lease, vehicle registration, insurance policy, mortgage document, or voter registration card. You cannot use the same document for both.10United States Postal Service. PS Form 1583 – Application to Add or Remove an Addressee Receiving Mail Through an Agent
You sign the form in person at the CMRA, through a live video session with the agent, or before a notary public. The CMRA uploads the completed form to the Postal Service’s CMRA Customer Registration Database and keeps a copy on-site, available to postal inspectors at any time.10United States Postal Service. PS Form 1583 – Application to Add or Remove an Addressee Receiving Mail Through an Agent Each adult receiving mail at the box needs a separate Form 1583. PO boxes rented directly from USPS go through a similar identification process, and virtual office providers generally require the same documentation.
The paper trail is the point. If a mailbox ever gets used in a crime, investigators can trace it to a real person. Keeping the box registered in your real name, used for your own mail, and compliant with the Form 1583 requirements is what keeps lawful use lawful.
If a Package Arrives Addressed to Someone You Don’t Know
Don’t open it. Refuse the delivery or return it to the sender. Accepting packages for people you don’t know — even once — can put your address on investigators’ radar, and that’s a problem much easier to prevent than to explain afterward.