I'm assuming, but im pretty sure sites like this operate by getting stolen credentials to third party shipping sites. think of all the sites like pirateship, shippo etc. if a companies account is hacked, they could create api credentials and just distribute a ton of requests across all the accounts. more accounts / larger orgs that get compromised = less chance of killing the beast

> im pretty sure sites like this operate by getting stolen credentials to third party shipping sites

If that were the case the charges would be fraud and the victims would be the companies that paid for the postage. The charge of counterfeiting is pretty specific - if I steal a $100 bill from you and spend it I don’t get charged with using counterfeit money, I get charged with theft.