Delivery Scams

Parcel delivery scams are some of the most common kinds of fraud. According to Citizens Advice, more than 40 million people have been targeted by delivery scams this year.

Delivery scams work by sending out texts or emails that appears to be from a delivery company like Royal Mail, DPD or Evri. The message will try to extract personal information or bank details from the victim, usually by saying a small fee must be paid to complete or reschedule a delivery.

The text or email will always contain a link that will take you to a website that looks just like the companies but is in fact a fake – and where, if you submit your address or card details, they will be stolen. In some cases, the scam will encourage you to install an app or click a link that contains spyware.

How to spot a delivery scam

If you are busy or impatiently waiting for a parcel, you’re much more likely to fall for this type of scam.

These messages can be really convincing – with branded headers, legitimate looking websites and sometimes even false parcel tracking information. However, the first thing to remember is that, in general, delivery companies will rarely ask you to provide bank details to complete or reschedule a delivery. (Royal Mail will never ask for payment via text or email).

So if you receive a message of this nature don’t open any of the links. Instead stop and consider whether it is legitimate or not by following these three simple steps:

1) Take a moment to think carefully about what packages you are expecting and from which company.

Most delivery scams will be very vague with details about what they are delivering or where from. By doing your own checklist of what you are expecting and from who, you can eliminate any obvious scams – messages from companies you don’t have packages with or items you aren’t expecting.

2) Look carefully at the details of the message: where it has come from, how it is phrased and where the link leads to.

Checking the phone number or email address the message was sent from will almost always expose a scam. A scam text message will arrive from a mobile number, rather than an official sender name like Evri or DPD. While made to look like an official channel, the email domains of scammers will have some key differences – whether it be slight misspelling or formatting differences such as @evri.co.uk rather than @evri.com. You can always Google an email address or phone number to see if it is legitimate or has already been reported as fraudulent.

Before you click on any links, hover over the button or URL to check it goes. If it brings up an unrecognised address, it could be a scam.

The message itself is also likely to contain poor language, spelling and grammatical errors: you may see exclamation marks, lack of punctuation or strange capitalisation.

3) Finally, remember that only scammers try to rush you – making you act quickly before you’ve had time to think about what you’re doing.

Anything that is obviously designed to put pressure on you to hand over your details quickly – phrases like “Actions will be taken if you don’t pay this fee” – should raise your suspicions.

Help, resources and how to report a delivery scam

With so many scammers about, most delivery companies now have pages on their websites dedicated to helping you spot them.

The Royal Mail website has a list of recent scams with examples that are worth taking a look at.

DPD and Evri also have pages dedicated to explaining phishing scams with examples of emails and texts sent by scammers pretending to be them.

There are also a number of organisations and government initiatives to help support consumers tackle fraud.

Take Five is a campaign to raise awareness about how to tackle fraud. Check their guidance on how to Stop, Challenge, Protect.

The National Cyber Security Centre has issued specific guidance on how to spot and what to do if you have clicked on a fake “missed parcel” message.

When you receive a suspicious message report it immediately to both the company they are pretending to be and report@phishing.gov.uk.

If the message is a text, you can forward it to 7726 for free. And if it’s an email, take a screenshot and forward it to report@phishing.gov.uk.

If you have any thoughts on this topic, or any other consumer issues you would like us to cover, feel free to get in touch with us at support@resolver.co.uk.