What is a parcel delivery text scam?

A parcel delivery text scam invents a delivery problem to obtain money or information, perhaps requesting a redelivery fee, address correction or tracking-app download. Criminals copy courier names because many people expect parcels. Check the delivery through the courier’s genuine website or app instead. 12

By Secordit. Last checked: 7 November 2026.

Go to the steps · All glossary terms

How it works

  1. A text claims a parcel could not be delivered. 12
  2. A link asks for a payment, details or an app installation. 12
  3. The request leads to a fake page or harmful software. 12

Real UK example

The NCSC's missed-parcel guidance documents texts that directed UK users to fake tracking apps. It describes banking malware, including FluBot, which could steal details and spread messages to contacts.

This particular example involved a download. Other parcel scams instead seek details or a small payment. 12

Warning signs

  • A message asks for a fee through an unfamiliar link. 12
  • You are told to install a tracking app from the text. 12
  • The message cannot be matched to an order you made. 12
  • A small delivery payment leads to demands for more sensitive information. 1234

What to do now

  1. Check the order with the retailer or courier through a genuine route. 12
  2. Forward a suspicious text to 7726 without opening its link. 1256
  3. If you installed an app, stop using affected accounts and follow the NCSC’s linked recovery guidance. 12

UK reporting and support

  • If money has gone or banking details were shared, call your bank using the number on your card. Or use 159 if your bank participates. 347
  • Report fraud or hacking in England, Wales or Northern Ireland to Report Fraud. In Scotland, call Police Scotland on 101. 48
  • If someone is in danger, call 999. 8

How to protect yourself

  • Use tracking details from your original order confirmation. 12
  • Install apps only through genuine app stores. 12
  • Keep your phone updated and discuss parcel scams with family members. 12

Frequently asked questions

Does Royal Mail ever send genuine texts?

Yes. Royal Mail describes genuine tracking messages. It does not request payment for an underpaid item by text, but customs notifications can differ. 2

Is a parcel text safe if I am expecting a delivery?

Not necessarily. The NCSC recommends checking through the courier’s genuine website or app even when you expect a parcel. 1

What if I entered card details for a delivery fee?

Contact your bank or card issuer. Report the text to 7726 and keep details of the transaction. 532

Matching kit

After a Scam: What to Do First · £7 · Digital download.

A printable UK checklist for the money, account and reporting steps. It is general information, not a recovery service.

General information, not legal, financial or personalised security advice. Secordit is not a police or bank reporting service.

News Pulse

Account security, explained by email.

Read about News Pulse

Sources

  1. NCSC, Scam 'missed parcel' SMS messages: advice on avoiding malware | National Cyber Security Centre. Accessed 7 November 2026 (Europe/London).
  2. Royal Mail, Help with online security │ Royal Mail Group Ltd. Accessed 7 November 2026 (Europe/London).
  3. UK Finance, Authorised Push Payment Fraud Reimbursement | UK Finance. Accessed 7 November 2026 (Europe/London).
  4. Report Fraud, Report Fraud alert: Police forces being impersonated in scam calls using ‘spoofed’ phone numbers - Report Fraud. Accessed 7 November 2026 (Europe/London).
  5. GOV.UK, Avoid and report internet scams and phishing: Report internet scams and phishing - GOV.UK. Accessed 7 November 2026 (Europe/London).
  6. Report Fraud, How to report suspicious messages, calls and websites - Report Fraud. Accessed 7 November 2026 (Europe/London).
  7. Stop Scams UK, 159 Phone number - Stop Scams UK. Accessed 7 November 2026 (Europe/London).
  8. Police Scotland, How to report a crime - Police Scotland. Accessed 7 November 2026 (Europe/London).