Royal Mail Text Scam UK: How to Spot and Avoid the Delivery Fraud
Criminals impersonate Royal Mail via SMS to trick you into revealing payment details or downloading malware.
What is this scam?
The Royal Mail text scam is a phishing attack where criminals send SMS messages pretending to be from Royal Mail. The messages typically claim your parcel failed delivery, requires additional payment, or needs rescheduling before it can be delivered. The scammer urges you to click a link in the text to 'resolve' the issue urgently. When you click the link, you either land on a fake website designed to steal your login credentials, payment card details, or personal information, or you unknowingly download malware onto your phone. Royal Mail is a legitimate UK postal service, but scammers exploit its trusted brand to make their messages appear credible. These scams are extremely common in the UK, with thousands of residents falling victim each year. The criminal's goal is financial theft or identity fraud.
Warning signs to look for
- The message demands urgent action or threatens to return your parcel if you don't respond quickly.
- The link in the text message goes to a web address that doesn't match Royal Mail's official domain (royalmail.com).
- You weren't expecting a parcel delivery, or the tracking reference number doesn't match any order you placed.
- The message asks you to confirm payment details, card information, or log into your Royal Mail account.
- The text contains spelling errors, awkward phrasing, or unusual formatting typical of scam messages.
- Royal Mail asks you to pay a fee via text link to release or reschedule a parcel (genuine Royal Mail never does this).
- The sender's number is unusual or doesn't match official Royal Mail numbers you've seen before.
- The message mentions clicking a link to download an app or update—Royal Mail doesn't distribute apps this way.
How this scam works step by step
The scam begins when you receive an unsolicited SMS claiming to be from Royal Mail about a failed delivery, payment issue, or parcel rescheduling. The message includes a clickable link and creates a sense of urgency by implying your parcel will be lost or returned if you don't act immediately. When you click the link, you're taken to a convincingly designed fake website that looks like Royal Mail's official site or a payment portal. The website then prompts you to enter personal information such as your name, address, phone number, date of birth, or email address. In some versions, you're asked to provide payment card details to 'release' the parcel or pay a supposed delivery fee. Once you submit this information, the scammer has what they need for identity theft or financial fraud. In other versions of the scam, clicking the link downloads malware onto your phone that can steal data, monitor your activity, or lock your device until you pay a ransom. Some victims report being redirected to legitimate-looking pages asking for Royal Mail login credentials, which the scammer then uses to access their accounts.
How to verify if it is genuine
First, do not click any links in the text message. Instead, go directly to Royal Mail's official website by typing royalmail.com into your browser (never use a link from the text). Log in to your account if you have one and check your parcel status. If there's a legitimate issue with your delivery, it will appear there with genuine contact options. Second, call Royal Mail's official customer service number on 03457 740 740 (available 8am-8pm, Monday to Friday) to ask about your parcel. Genuine Royal Mail staff will never ask for payment via SMS or request you click external links. Third, check if you actually ordered something recently—if you have no parcels on the way, the text is definitely a scam. Fourth, inspect the sender's number. Royal Mail legitimate delivery notifications come from specific short codes or known numbers, not random long numbers. If you're unsure, visit the Royal Mail website directly and look for their official guidance on how to identify fraudulent messages. You can also compare the message against our related guide on identifying phishing at /guides/is-this-website-a-scam/.
What to do if you have already interacted
If you clicked the link but didn't enter any information, stop using that device immediately and monitor it for unusual activity over the next few weeks. Watch for unexpected charges on your bank account or credit card. If you entered personal information like your name, address, or date of birth, these details are now at risk for identity fraud. Contact Royal Mail directly on 03457 740 740 to alert them that scammers are using their name. Report the fraud to Action Fraud on 0300 123 2040 or online at actionfraud.police.uk with a screenshot of the message if possible. If you entered payment card details, contact your bank immediately using the number on the back of your card (never use a number from the scam text) and request they cancel the card and reissue a new one. Monitor your credit file using free services like Clearscore or Equifax to detect fraudulent applications for credit in your name. If malware was downloaded, back up your data, reset your phone to factory settings, or seek help from a phone repair specialist. Keep records of all actions taken and correspondence with your bank.
Reporting this scam in the UK
Report the scam to Action Fraud, the UK's official fraud reporting centre, on 0300 123 2040 or online at actionfraud.police.uk. Provide them with the exact SMS text, the sender's number, the date received, and any web address you clicked. Forward the SMS directly to the NCSC Suspicious Email Reporting Service by texting the message to 7726 (this works for SMS as well as email). This helps track and block scam sources at a national level. Report the fraudulent website to the NCSC by visiting www.ncsc.gov.uk/report and providing the fake website URL. If you're concerned about identity theft, contact Citizens Advice consumer helpline on 0808 223 1133 (free and confidential) to discuss next steps. They can advise on protecting your credit file and what monitoring services to use. You can also report the scam directly to Royal Mail via their official website so they're aware of the impersonation and can issue public warnings. Save all screenshots and documentation of the scam for your records—you may need these if fraudulent charges appear later.
Frequently asked questions
Is Royal Mail itself a scam?
No, Royal Mail is the UK's legitimate national postal service and is not a scam. However, criminals impersonate Royal Mail via text messages to steal from real customers. If you receive a suspicious text claiming to be from Royal Mail, verify it independently by visiting royalmail.com directly or calling 03457 740 740 rather than using any link or number provided in the message.
I already sent money to the scammer—can I get it back?
Contact your bank immediately using the number on the back of your debit or credit card and report the fraudulent transaction. Your bank may be able to reverse the payment if you act quickly, especially if the money hasn't yet left their system. Report the scam to Action Fraud on 0300 123 2040 and provide them with bank details of the account that received your payment—they may be able to freeze it. Unfortunately, if the money has already been transferred to another account or withdrawn as cash, recovery is very difficult, which is why reporting it urgently is critical.
What if I clicked the link but my phone didn't seem to download anything?
Even if nothing obviously downloaded, the fake website you landed on may have collected data you entered, or your phone's security may have blocked malware silently. Monitor your device for unusual behaviour such as slow performance, unexpected pop-ups, rapid battery drain, or strange data usage. Change all important passwords (email, banking, social media) from a different secure device in case credentials were harvested. Run a reputable mobile security scan using apps like Avast or McAfee, and consider backing up and factory resetting your phone if you're concerned.
How do I report a Royal Mail text scam?
Forward the SMS directly to 7726 (the NCSC's spam and phishing number) by copying and pasting the message content or replying to it with '7726'. This alerts national security authorities to the scam. Also report it to Action Fraud on 0300 123 2040 or at actionfraud.police.uk with as much detail as possible, including the sender's number, exact message text, date, and any links you clicked. Report the fake website to the NCSC at www.ncsc.gov.uk/report if one was involved.