The tracking number may come from the USPS, UPS, or another carrier; how scammers access the numbers is unclear, but that's a problem for the carriers to address.