📦 THE UK’S MOST COMMON TEXT SCAM
Fake parcel delivery texts are the most reported scam to Which?’s Scam Sharer tool. Research shows 3 in 5 UK adults received a fake delivery text in the past year. With online shopping at an all-time high, criminals exploit the fact that most of us are always expecting a parcel.
⚙️ HOW THESE SCAMS WORK
- The text — You receive an SMS that appears to be from Royal Mail, DPD, Evri (Hermes), or Amazon claiming a delivery failed or a fee is owed.
- The link — It directs you to a convincing copycat website that looks identical to the real courier’s site.
- The trap — You’re asked to enter personal details and pay a small “redelivery fee” (usually £1–3). The form captures your full name, address, and card details.
- The damage — Criminals use your details for further fraud, make purchases with your card, or sell your data on the dark web.
🔍 HOW TO SPOT A FAKE
- Check the sender — Real delivery notifications come from official shortcodes or email addresses, not random mobile numbers.
- Inspect the URL — Legitimate Royal Mail links use royalmail.com. Fakes use variations like royal-mail-redelivery.com or rm-delivery.co.uk.
- No fee for redelivery — Royal Mail, DPD, and Evri do not charge fees for redelivery. If a text asks for payment, it’s a scam.
- Check your tracking — If you’re expecting a parcel, go directly to the courier’s official website or app to check the status. Don’t use the link in the text.
- Watch for pressure — Phrases like “your parcel will be returned within 24 hours” are designed to rush you into acting.
✅ WHAT TO DO
- Don’t click the link — delete the text immediately.
- Report it — Forward the text to 7726 (spells SPAM on a keypad). This is the free spam reporting number for all UK networks.
- Report phishing sites — Send the URL to report@phishing.gov.uk (NCSC).
- Already entered details? Contact your bank immediately to freeze your card, then change passwords on any accounts using the same email.
- Use courier apps — DPD’s ‘Your DPD’ app and Royal Mail’s app give genuine tracking updates without SMS.
Sources: Which?, NCSC, Royal Mail, DPD, Action Fraud