The U.S. Postal Service has spent years installing hardened collection boxes, electronic locks, barcode scanners and other technology to combat an increasingly sophisticated mail-theft problem.
In Las Vegas, auditors found the Postal Service was still struggling with something considerably more basic: knowing where its keys were.
A September 30 report from the U.S. Postal Service Office of Inspector General found that two Las Vegas post offices could not account for dozens of arrow and modified arrow lock keys, the master keys postal employees use to access collection boxes and other mail receptacles.
The problems went considerably beyond a handful of misplaced keys.
Auditors found keys that Postal Service records said existed but could not be located. They found other keys physically sitting inside postal facilities that weren’t recorded in the inventory system at all. They found keys with incorrect statuses. And, in perhaps the most bureaucratically complete illustration of the problem, they found six keys recorded as lost that were still at the facilities and being used.
The findings come in a city already struggling with mail theft.
Customers submitted 1,077 mail-theft complaints in Las Vegas between October 2025 and March 2026, according to the OIG. Among 12,458 locations nationwide that received at least one complaint, Las Vegas ranked eighth.
Against that backdrop, the auditors decided to count the keys.
The results were not reassuring.
The Missing Keys That Were “Verified”
The OIG examined operations at the Meadow Mesa and Westridge post offices, where the Postal Service’s Retail and Delivery Applications and Reports system, known as RADAR, listed 480 arrow and modified arrow lock keys as verified.
Auditors couldn’t locate 95 of them.
At Meadow Mesa, 60 of 209 verified keys could not be found. At Westridge, 35 of 271 were missing.
That means auditors could not locate nearly one in five of the keys the Postal Service’s own system identified as verified.
The consequences of losing track of an arrow key are potentially much larger than losing a conventional building key. Arrow keys can provide access to multiple postal receptacles within an area. According to the OIG, the 95 unaccounted-for keys potentially placed mail receptacles across 13 ZIP Codes at risk.
The audit does not establish that those keys were stolen, nor does it link any particular missing key to any of Las Vegas’ 1,077 mail-theft complaints.
What it establishes is that the Postal Service could not reliably account for security-sensitive keys in one of the nation’s most active mail-theft locations.
And the missing keys were only half of the problem.
Auditors examined another 499 keys that RADAR listed as not verified and could not locate 457 of them.
Then they encountered the opposite problem.
Auditors physically found 183 keys at the two facilities that were not recorded in RADAR at all.
Another 93 keys were physically located but had incorrect statuses in the system.
In other words, the database contained keys auditors couldn’t find, while the post offices contained keys the database didn’t know existed.
Lost, Stolen — and Still in Use
Local management records identified 71 keys as lost or stolen.
Auditors asked whether those losses had been reported to the U.S. Postal Inspection Service, as required. Local management could not establish that they had been.
The Inspection Service told auditors it had received no lost-or-stolen-key reports from either facility since January 2025.
Then auditors found six of the supposedly lost keys.
Three were at Meadow Mesa and three were at Westridge. All six were still being used.
The physical controls surrounding the keys weren’t much better.
Neither facility was using the required PS Form 1625 for key accountability. At Westridge, auditors observed a key cage that was initially locked but was subsequently left open throughout the morning. Carriers entered the cage and signed out their own keys without management oversight.
At Meadow Mesa, two keys identified as missing were eventually discovered inside postal vehicles.
Management also told auditors that monthly and semiannual inventory certifications were performed by reviewing samples of keys rather than reconciling the entire inventory.
Supervisors and other employees responsible for key accountability were unaware of required training, according to the OIG, and not everyone assigned the training had completed it when auditors arrived.
If this were merely a Las Vegas management problem, it would be concerning enough.
It isn’t.
USPS Has Seen This Movie Before
The Las Vegas findings extend a key-accountability problem that the Postal Service’s watchdog has documented for years.
In a September 2023 report, the OIG found that 155 of 550 arrow keys examined across 16 delivery units were missing — 28 percent of the keys auditors reviewed.
USPS responded with new controls, including RADAR certifications and a 24-hour accountability process using barcodes and employee handheld scanners.
The technology changed.
The problem persisted.
By August 2025, the OIG found that 18 of 21 previously audited facilities — 86 percent — still did not maintain accurate arrow-key inventories.
Auditors found 108 keys at 17 facilities that weren’t recorded in RADAR.
Across additional audit work conducted between May 2024 and December 2025, the OIG was unable to verify 376 of 1,962 keys recorded in the system, roughly 19 percent of the inventory examined.
Then, in a nationwide follow-up released in May 2026, the OIG concluded that many of the same weaknesses remained.
The problems included inaccurate inventories, inadequate safeguarding, missing-key reporting failures, training deficiencies and weaknesses in management’s ability to monitor whether required key scans accurately represented actual accountability.
One finding from that national review looks particularly familiar after Las Vegas.
Auditors examined 14 keys recorded as lost or stolen and determined that six — 43 percent — had never been reported to the Postal Inspection Service.
Just months later, Las Vegas auditors found 71 keys recorded locally as lost or stolen, while the Inspection Service said it had received no such reports from either audited facility since January 2025.
This is no longer a case of one office losing a key ring.
It is a recurring control failure that has survived multiple audits, new databases, barcode scanners, certifications, training requirements and corrective actions.
High-Tech Security, Low-Tech Problem
The persistence of the problem is especially striking because USPS has made substantial investments under its Project Safe Delivery initiative.
The Postal Service has installed tens of thousands of high-security collection boxes and electronic locks as part of its effort to combat mail theft and attacks on letter carriers.
Those efforts have produced measurable improvements. The Postal Inspection Service has reported declines in letter-carrier robberies, high-volume mail theft and customer mail-theft complaints following expanded enforcement and security measures.
Las Vegas itself had received some of those improvements.
Auditors reported 127 high-security collection boxes and 262 electronic locks had been deployed in the area.
But enhanced collection boxes and electronic security systems provide only part of the answer when the Postal Service cannot reliably determine who possesses the physical keys to its existing infrastructure.
The criminal value of those keys isn’t hypothetical.
Federal investigators have prosecuted cases involving compromised arrow keys being used to access postal collection boxes and steal checks, credit cards and other mail. In one recent St. Louis investigation publicized by the OIG, a postal employee sold an arrow key and stolen mail to a criminal organization, which used the key to access mail receptacles.
Nothing in the Las Vegas audit indicates postal employees there were involved in such activity.
But those cases demonstrate why the Postal Service’s inability to account for its keys represents more than an untidy inventory system.
The Box Was Broken, Too
Auditors also examined 20 mail receptacles around Las Vegas and discovered a jumbo collection box that had been vandalized in a manner that allowed someone to reach inside and remove mail.
There was plenty to reach.
The box contained a full hamper, and auditors observed mail caught in its security equipment.
Local management told auditors it had repeatedly requested repairs. Maintenance personnel, however, could not substantiate those requests dating back to February.
The OIG recommended that management replace or repair the box and establish procedures to ensure future repair requests are documented and tracked.
Then There Is the $17.9 Million
The audit also uncovered an entirely separate financial-control problem involving lock replacements.
Between October 2025 and July 27, 2026, the Nevada-Utah District replaced 23,595 locks.
Nationwide, USPS replaced 358,566.
Auditors found inconsistent procedures for determining whether the Postal Service or customers should pay for those replacements.
Using a conservative estimate of $50 per lock, the OIG calculated that USPS potentially missed approximately $1.2 million in revenue in the Nevada-Utah District and another $16.7 million nationwide.
Potential missed revenue: approximately $17.9 million.
Postal Service management agreed with the monetary impact and agreed with all five recommendations contained in the audit.
Those recommendations call for reconciling key inventories, improving key-accountability procedures, reporting lost and stolen keys to the Postal Inspection Service, improving training, fixing the damaged collection box and developing clearer procedures for assessing lock-replacement charges.
Those are reasonable corrective measures.
They are also remarkably familiar.
The Database Knows. Except When It Doesn’t.
The Postal Service’s security challenge is real. Mail thieves have become increasingly organized, and USPS has responded with hardened boxes, electronic locks, enhanced enforcement and new systems intended to make traditional arrow keys less useful to criminals.
But the Las Vegas audit exposes the decidedly analog weakness underneath that modernization effort.
Someone still has to count the keys.
Three years after the OIG began documenting significant arrow-key accountability problems, auditors arrived at two Las Vegas post offices and encountered essentially the same failures: inaccurate inventories, missing keys, unreported losses, incomplete training and weak physical controls.
USPS had created a database intended to tell management where the keys were.
Auditors still had to go looking for them.
And sometimes, the keys officially listed as lost were sitting right there.
