From San Francisco to Houston and Seattle, federal auditors have repeatedly documented missing master keys, unreliable inventories, and failures to address security warnings. The findings raise questions about the Postal Service’s ability to safeguard the infrastructure protecting Americans’ mail.
The United States Postal Service has spent years introducing new locks, reinforced collection boxes, and other measures intended to combat mail theft. But while the agency has been upgrading its security infrastructure, federal auditors have repeatedly discovered a more fundamental problem: the Postal Service cannot consistently account for the keys used to access that infrastructure.
The latest warning arrived October 14, when the USPS Office of Inspector General released an audit of two Seattle postal facilities. Auditors discovered 69 keys recorded as verified but missing from their assigned facilities, another 122 keys physically present but absent from inventory records, and hundreds of additional keys whose whereabouts could not be established through the available documentation.
At one Seattle facility, auditors counted nearly three times the number of keys authorized for its inventory.
The problems extended beyond misplaced equipment. Auditors found unsecured keys, incomplete accountability records, failures to report stolen keys, and a troubling breakdown in the Postal Service’s internal security oversight.
Of 29 arrow-key audits conducted by the Postal Inspection Service’s Seattle Division between June 2025 and July 2026, postal facilities failed to respond to 20 resulting audit letters.
The Postal Inspection Service told auditors it lacked the authority or an established policy to compel facilities to respond and correct identified deficiencies.
In other words, the Postal Service had a process for identifying security failures, but its own inspectors could not reliably ensure those failures were corrected.
And Seattle was hardly the first warning.
A Problem That Crosses Postal Districts
A review of previous inspector general reports reveals similar deficiencies across postal facilities in San Francisco, Chicago, Houston, Sacramento, and Las Vegas.
The problems differ in their particulars, but the underlying failures are remarkably consistent: inaccurate inventories, missing or unverifiable keys, incomplete check-in and check-out records, insufficient training, and weak follow-up on security findings.
In an August 2024 San Francisco audit, inspectors identified 93 missing or unverifiable keys among 533 recorded across three facilities. At Townsend Carrier Annex alone, 88 of 305 recorded keys could not be verified.
Managers had not consistently certified inventories, and some supervisors lacked sufficient knowledge of requirements for reporting missing keys.
The March 2025 Houston audit documented another troubling development. At Beechnut Station, management certified an inventory despite knowing that its records contained inaccuracies. The Postal Inspection Service had previously identified deficiencies, yet problems remained when OIG auditors examined the facilities.
Houston also exposed discrepancies involving newer security equipment. Auditors found electronic locks awaiting installation even though deployment records indicated they had already been installed. Similar discrepancies involved high-security collection boxes.
These were not simply disagreements over paperwork. The records were supposed to describe the location and status of physical security equipment.
In Sacramento, auditors again recommended improved inventory reconciliation, daily accountability procedures, management training, and stronger follow-up on Postal Inspection Service findings.
Chicago auditors identified deficiencies involving key inventories, safeguarding practices, and management controls.
Several earlier recommendations have since been closed by the OIG, indicating that USPS reported corrective actions that satisfied the audit follow-up process. Nevertheless, subsequent audits continued to identify similar categories of weaknesses elsewhere.
The recurring findings suggest a problem extending beyond individual postmasters or isolated lapses in supervision.
The National Inventory System Has Problems of Its Own
The Postal Service uses a system known as RADAR to maintain records of arrow keys and modified arrow lock keys.
These keys are especially sensitive because they provide access to postal equipment and, depending on their configuration, can potentially compromise multiple mail receptacles.
Accurate inventory records are therefore not a bureaucratic luxury. They are a basic security requirement.
Yet an August 2025 OIG field operations review found inaccurate arrow-key inventories at 18 of 21 delivery units examined.
Across those units, auditors identified 108 keys physically present but absent from RADAR, 64 duplicate records, 37 recorded keys that could not be located, and 41 incorrectly classified keys.
The 18-of-21 finding does not establish that 86 percent of all postal facilities nationwide maintain inaccurate inventories. The auditors examined selected units, not a statistically representative sample of the entire Postal Service.
But the findings are significant because they identify weaknesses in the national inventory process itself.
Auditors reported that RADAR permitted duplicate entries and invalid serial-number formats. Management also lacked sufficient familiarity with some accountability requirements.
That creates two overlapping vulnerabilities. Employees may fail to maintain accurate records, while the system intended to detect and prevent inaccuracies may permit them.
A national database is only as useful as the information it contains, and the controls governing that information.
Seattle: A Security Problem Hiding in Plain Sight
The October 2026 Seattle audit offers a particularly detailed illustration of the consequences.
At Seattle Carrier Annex, auditors counted 423 keys against an authorized inventory limit of 144.
They also found 108 keys physically present but not recorded in RADAR.
Across the two facilities, 69 keys marked as verified could not be located. Another 475 keys classified as unverified could not be located on-site without adequate documentation explaining their disposition.
Those figures should not be interpreted as proof that every unlocated key was stolen. Missing inventory records, transfers, retirements, and other unresolved accounting discrepancies may explain some of the findings.
The distinction does not eliminate the security concern. It underscores the central problem: management lacked sufficiently reliable records to establish what had happened to security-sensitive equipment.
Auditors also identified deficiencies in daily custody records.
At Seattle Carrier Annex, 148 of 217 keys recorded as in use did not appear on the required check-in/check-out form. A separate 186 of those 217 keys lacked completed barcode scans.
At Wedgwood Station, auditors observed 31 keys in an unlocked accountable cage and retail counter area.
Three keys listed as stolen in October 2025 had not been properly reported to the Postal Inspection Service.
Following the audit visit, Seattle Carrier Annex management identified another 30 lost keys, which were subsequently reported under a single dispatch tracking number.
The audit also revealed a longer history of uncorrected security warnings. The Postal Inspection Service had audited Seattle Carrier Annex in February and April 2024 without receiving responses describing corrective actions.
More than two years later, the OIG was still identifying serious deficiencies at the facility.
The Inspectors Who Could Not Compel a Response
Among the Seattle findings, the failure to respond to internal security audits may be the most consequential.
Between June 2025 and July 2026, the Postal Inspection Service’s Seattle Division conducted 29 arrow-key audits. Twenty resulting audit letters went unanswered.
The Postal Inspection Service told the OIG it lacked an established mechanism to compel facility management to respond and address deficiencies.
That raises a question extending well beyond Seattle: what happens when a federal organization’s security personnel identify a vulnerability but lack an effective mechanism to ensure it is corrected?
An audit can document missing keys. It can identify inadequate training. It can recommend stronger controls.
But identifying a vulnerability and eliminating it are two different accomplishments.
The Postal Service’s own findings suggest that, at least in the facilities examined, the connection between those two functions was unreliable.
New Locks, Old Accountability Problems
USPS has not ignored the broader threat of mail theft.
Under Project Safe Delivery, the agency has deployed high-security collection boxes and electronic locks intended to reduce opportunities for criminals to exploit traditional arrow-key systems.
By December 2025, the OIG reported that USPS had installed 23,190 high-security collection boxes and 47,360 electronic locks nationally.
Those installations represent a substantial operational effort.
But the Houston and Seattle findings raise questions about whether security modernization is being accompanied by equally reliable inventory management, deployment tracking, and oversight.
In Houston, records indicated that certain security devices had been installed when auditors found them awaiting installation.
In Seattle, auditors found extensive deficiencies in the records and physical controls governing existing keys.
Neither finding establishes that Project Safe Delivery has failed to reduce mail theft. Nor do the audits establish that the new equipment is ineffective.
They do, however, demonstrate why installation totals alone cannot establish the effectiveness of a security program.
A meaningful assessment would also require reliable deployment records, accurate key inventories, timely reporting of compromised equipment, and evidence that identified vulnerabilities are corrected.
USPS Agrees to Corrective Actions
Postal Service management agreed with the Seattle audit’s findings and six recommendations.
Planned corrective actions include additional management training, inventory reconciliation, improved reporting procedures, and stronger tracking of responses to Postal Inspection Service audits.
The corrective-action schedule extends into 2027.
Among the deadlines identified in the report are November 30, 2026, for certain inventory controls and training measures; January 31, 2027, for RADAR reconciliation improvements and audit-remediation tracking; and April 30, 2027, for additional reporting and notification guidance.
The OIG considered management’s proposed actions responsive.
That does not mean all corrective measures have already been implemented or independently verified.
The distinction matters because earlier audits have also produced corrective-action plans and closed recommendations, while later examinations continued to uncover similar deficiencies elsewhere.
The central question is whether USPS can demonstrate lasting improvements across its operating network, rather than isolated corrections at facilities selected for inspection.
The Questions That Remain
The public audit record does not establish how many arrow keys are currently missing, stolen, incorrectly recorded, or otherwise unaccounted for across the entire Postal Service.
It also does not establish how many Postal Inspection Service security-audit findings nationwide remain unresolved, how frequently previously closed deficiencies recur, or whether existing reporting systems reliably connect missing-key incidents with decisions about replacing compromised locks.
Those are consequential gaps.
The Postal Inspection Service relies in part on information about lost keys and mail-theft complaints to identify risks and guide security responses.
Incomplete reporting could therefore affect more than the accuracy of an inventory spreadsheet. It could affect the information used to determine where protective measures are needed.
That possibility requires further examination, not assumption.
The Postal Service has acknowledged the deficiencies documented in Seattle and outlined corrective actions. Previous audits also show that the agency has taken steps to address some identified weaknesses.
But the repeated appearance of similar findings across multiple cities, together with documented deficiencies in the national inventory system, raises a larger question about the durability and reach of those improvements.
For an organization entrusted with protecting the nation’s mail, the ability to account for its master keys is a fundamental responsibility.
The audits show that responsibility has repeatedly fallen short of the Postal Service’s own standards.
And until the agency can demonstrate that its inventory records are reliable, its security warnings receive effective follow-up, and its corrective actions remain effective beyond the next inspection, the public has reason to question whether the vulnerabilities documented by federal auditors have truly been resolved.
Bureaucracy Times is seeking additional information from the Postal Service concerning nationwide arrow-key accountability, unresolved security-audit findings, corrective-action verification, and the effectiveness of Project Safe Delivery. This article may be updated as additional information becomes available.
