Fake texts and emails claiming a Royal Mail delivery failed are on the rise as Christmas parcels start moving, and one wrong tap can expose your bank details.
If a text says Royal Mail could not deliver your parcel and asks you to tap a link, treat it with suspicion. UK officials are warning that these fake messages become more common around Christmas, when many people are waiting on a delivery. The National Cyber Security Centre (NCSC), the UK's cyber defense agency, says missed-parcel scams peak in the festive period.
Timing is the trick. When you are expecting a package, a message about it feels believable. Azza Kidiwala, an iPhone expert at Techwala, says the useful habit is to leave the message alone for a moment, so its urgency does not make the decision for you.
The NCSC says some scam messages send people to an app that looks like an official parcel tracker. It is actually malicious software that can steal passwords and banking details.
Royal Mail lists these red flags in its scam guidance:
Not every fee message is a scam. Royal Mail says it may text or email you about customs charges when the sender gave your contact details, and a grey card comes with it. For underpaid postage, it says it does not ask for payment by text or email. It leaves a grey "Fee to Pay" card instead. Checking your delivery on the official Royal Mail website or app, opened yourself, avoids the problem.
The steps in the alert box above cover what to do. One extra point from the NCSC: if you think you installed malware, do not log in to accounts on that phone and follow its reset guidance. A factory reset wipes personal data. The NCSC warns against backing up the phone first, because the backup could contain the malware.
Expect more of these messages as posting deadlines near. Royal Mail's last recommended dates for Christmas 2026 are:
Royal Mail advises posting as early as possible and says the dates may change. The Post Office says parcels must arrive before each branch's final acceptance time, which varies, so check before you go.
Never tap a link in an unexpected missed-parcel message. Open the official Royal Mail site or app yourself to check your delivery.
The Attala County Sheriff's Office in Mississippi says scam calls are reaching residents, and a call that sounds official may not be.
Read more: Mississippi sheriff warns residents about scam phone callsScammers are posing as Texas sheriff's officers and claiming you missed jury duty. Caller ID can show a real police number even when the call is fake.
Read more: Fake jury duty calls spoof a real Texas sheriff's phone numberFake PayPal emails and texts, some posing as a security report, try to get you to tap a link and type your login. Checking your account directly avoids the trap.
Read more: Got a fake PayPal message? Skip its link and check your account yourself
