Office of Research Services logo image Office of Research Services image  - Serving the NIH Community
ORS Information Line
NIH Offical Logo - Linked to the main NIH website

 Guidelines for Identifying Suspicious Mail

The ORS Mail and Courier Services staff is taking specific precautions and being extra vigilant with the mail, packages and other items. NIH staff should also be cautious and vigilant and follow these guidelines on how to identify suspicious mail:

  • You are not familiar with the name and address of sender.
  • Package or letter has no return address.
  • Is the addressee expecting the package/letter? If so, verify expected contents.
  • Address block has an improper or incorrect title, name or address.
  • A title but no name in the address.
  • Wrong title with name in address.
  • Handwritten or poorly typed addresses.
  • Misspelling of common words.
  • Return address and postmark are not from the same area.
  • Excessive postage or unusual stamps.
  • Special handling instructions on the package, such as special delivery, open by addressee only, etc.
  • Restrictive markings such as confidential, personal, etc.
  • Overwrapped, excessive tape, string or wrappings.
  • Oddly shaped or unevenly weighted packages
  • Lumpy or rigid envelopes, stiffer than normal, heavier than normal, etc..
  • Lopsided or uneven envelope.
  • Oily stains or discolorations.
  • Strange odors.
  • Protruding wires or tinfoil.
  • Visual distractions (drawings, unusual statements, hand drawn postage, etc.

Suspect Letter and Package Indicator Graphic - Please print this Department of Health and Human Services flyer to use as a handy reference.

Please be advised that this is only a general checklist. There are processes in place at NIH to deal with suspicious mail incidents. Employees should not attempt to address a suspicious incident on their own. NIH employees on campus and in local off-campus facilities should both call 911 (not 9-911) to notify NIH emergency response staff about suspicious mail or the release of suspicious material from mail and packages.


This page last updated on 26 Oct 2001