Fake parcel text scam: how to spot it and what to do

Almost everyone knows the scenario. A text warns that a parcel could not be delivered and that a small sum, often a pound or two, must be paid to release it. The link leads to a page dressed in the colours of a well known courier. Everything looks credible, and that is exactly the point.

How the scam is built

The small amount requested is not a slip, it is the heart of the trap. Paying a pound or two feels harmless, so your guard drops. In reality, the page exists only to harvest your card number, its expiry date and its security code. That information is then used for purchases or sold on.

Timing matters too. The waves intensify around holidays and sales, when everyone is genuinely waiting for a delivery.

Spotting the fake parcel

Before you tap anything, take three seconds to look:

• The sender is an ordinary mobile number, not an official courier channel.
• The link does not point to the official domain, it uses a lookalike address or a shortener.
• A payment is demanded online, in a hurry, for a delivery.

You can copy the link address into the URL checker, or paste the whole text into the email and SMS analyser to get a risk estimate.

The right response

Do not tap the link. If you really are expecting a parcel, open the courier's official app or website and check the tracking yourself. Delete the text, then report it to your provider by forwarding it to 7726.

If you have already entered your card, block it without delay and watch your statements. An antivirus with anti-phishing protection can also block this kind of fraudulent page upstream, on both phone and computer.

To understand the wider mechanics and the other pretexts in use, return to the guide Email and SMS phishing. You can also report fraudulent messages to Action Fraud.