Bank Holiday Parcel Scam Wave UK: How to Spot and Avoid Fake Delivery Texts
Scammers are using bank holidays as cover to flood your phone with fake parcel delivery texts — here's how to protect yourself.
What is this scam?
The bank holiday parcel scam is a wave of fraudulent SMS messages sent to UK residents, typically timed around bank holidays when people are expecting deliveries and less likely to check details carefully. Scammers send texts claiming to be from major courier services (Royal Mail, DPD, Hermes, Yodel) stating that a parcel is waiting for collection, delivery has failed, or a customs fee needs paying. The messages include a link that, when clicked, takes you to a fake website designed to look identical to the real courier service.
Once you land on the fake site, you're asked to enter personal details, payment information, or to download a malicious app. The scammers then use this information to steal money from your account or commit identity fraud. These scams are particularly prevalent during bank holiday periods because delivery volumes are high and people's routines are disrupted, making them more likely to click without thinking.
Warning signs to look for
- The message uses generic greetings like 'Dear Customer' instead of your name, which legitimate couriers avoid.
- The URL in the text doesn't match the official company website (e.g., 'royalmail-confirm.tk' instead of 'royalmail.com').
- The message creates false urgency, claiming your parcel will be returned or destroyed if you don't act immediately.
- You're asked to pay a fee or update payment details via text link — legitimate couriers ask this via their official apps or websites only.
- The text contains spelling or grammar errors, or unusual formatting and spacing.
- The message arrives during a bank holiday when you weren't expecting a parcel, or from a service you don't use.
- The sender ID looks odd or shows a long number rather than a company name.
- The link is shortened (bit.ly, tinyurl) which hides the real destination address.
How this scam works step by step
The scam begins when you receive an unsolicited SMS, often during a bank holiday period, claiming a parcel awaits collection or that delivery has failed. The message includes a link designed to look legitimate but actually directs to a fake website controlled by scammers. Step one: you click the link out of curiosity or panic. Step two: you land on a convincing replica of the real courier's website, complete with logos and familiar layouts.
Step three: you're prompted to 'confirm delivery' or 'pay a customs fee' and enter your details — name, address, phone number, email, and crucially, payment card information. Some fake sites also ask you to download a 'delivery app' which is actually malware that steals your banking credentials and enables access to your online accounts. Step four: scammers use your card details to make fraudulent purchases or drain your account. They may also sell your personal data to other criminals, leading to identity theft, or use your phone number to send similar scams to your contacts.
The scam is effective because it exploits trust in familiar brand names and the expectation that parcels genuinely do get held up during busy periods.
How to verify if it is genuine
If you receive a parcel delivery text, never click the link in the message. Instead, go directly to the courier's official website by typing the address into your browser — for example, type 'royalmail.com' yourself rather than using any link from the text. Once on the real website, log into your account (if you have one) and check your actual deliveries and any pending notifications. You can also call the courier directly using the phone number on their official website or your previous order confirmation — not the number in the suspicious text.
Legitimate UK courier services (Royal Mail, DPD, Hermes, Yodel, Amazon Logistics) will never ask you to pay fees or update card details via text message links. They use their official apps, websites, or phone calls instead. If you're unsure whether a parcel is genuinely with them, contact the original retailer (Amazon, eBay, etc.) who sent it and ask them to confirm. For more detailed guidance on spotting delivery scams, see our guide on DPD Scam Text Messages: How to Spot a Fake DPD Delivery Text which covers similar SMS fraud tactics in depth.
What to do if you have already interacted
If you clicked the link, stop immediately and don't enter any information. Clear your browser history and close the page. If you already entered payment card details, contact your bank or card issuer right away using the number on the back of your card — not any number in the scam message. Tell them the card may have been compromised and ask them to cancel it and issue a replacement. Monitor your bank account closely for the next 30 days for any unauthorised transactions and report these to your bank immediately.
If you downloaded an app, uninstall it at once and change your passwords for all important accounts (email, banking, shopping sites) using a different secure device. Use a strong, unique password for each account. If you provided your email address or phone number, watch for follow-up scams or phishing emails and mark them as spam. Report the original SMS to Action Fraud by forwarding it to 7726 (the anti-fraud SMS shortcode). Consider placing a fraud alert with Experian, Equifax, and CallCredit if you're worried about identity theft.
Document everything — screenshots, times, sender details — for reporting and your bank's records.
Reporting this scam in the UK
Report the scam SMS immediately by forwarding it to 7726, which is the free shortcode for reporting spam and fraud messages in the UK. Your phone operator will investigate and block the sender. Next, report the scam to Action Fraud by calling 0300 123 2040 or visiting their online form at actionfraud.police.uk — they compile data on fraud trends and can take action against major scam waves. If the scam involved a phishing website or malicious app, report it to the National Cyber Security Centre (NCSC) by emailing the suspicious URL or app details to report@phishing.gov.uk.
Contact Citizens Advice consumer helpline on 0808 223 1133 if you've lost money and need guidance on recovery options and your rights. Report the fake company website to the relevant courier's official customer service channel — they actively work to shut down fraudulent replicas. Keep a record of all reports you make, including reference numbers, as you may need these for your bank or if pursuing a refund. The more people who report these scams, the faster they can be shut down and the better protected other UK residents become.
Frequently asked questions
Is Bank Holiday a legitimate delivery company or is this always a scam?
Bank Holiday is not a delivery company at all — it's a UK public holiday. Scammers abuse the term 'bank holiday' in their messaging to create false urgency or explain why deliveries are delayed. The scam impersonates real courier services like Royal Mail, DPD, or Hermes, not a fictional 'Bank Holiday' company. If a text mentions 'Bank Holiday delivery delays', it's almost certainly a scam trying to exploit the festive period and busy shipping volumes.
I already entered my card details on the fake website. Can I get my money back?
Contact your bank immediately using the number on the back of your card — not any number from the scam message. Tell them your card details were compromised via a phishing scam. Most banks can freeze the card, issue a replacement, and reverse any fraudulent transactions if reported quickly, usually within 24-48 hours. You're protected under the Payment Services Regulations if you report it promptly, though timescale varies by bank. Keep all evidence (screenshots, texts) for your claim.
Why are these scams sent during bank holidays specifically?
Scammers time these waves during bank holidays because delivery volumes surge (people buy more online), legitimate delivery delays are common, and people's routines are disrupted — all of which make them more likely to click without checking. They also know that banks and customer service teams have reduced staff during bank holidays, so complaints and fraud investigations are slower. Bank holidays create the perfect storm for courier scams.
How do I report a bank holiday parcel scam text in the UK?
Forward the SMS to 7726 (free, works on all UK networks) to report it as spam and fraud — your phone operator will investigate. Then report details to Action Fraud on 0300 123 2040 or at actionfraud.police.uk. If a malicious link or app was involved, email the NCSC at report@phishing.gov.uk with the URL or app name. Call Citizens Advice on 0808 223 1133 if you've lost money and need guidance on recovery.