Hermes Parcel Scam Text Messages UK: How to Spot and Report Them
Scammers are sending fake Hermes delivery texts to thousands of UK residents—here's exactly how to spot them and stay safe.
What is this scam?
The Hermes parcel scam text is a phishing attack where criminals send SMS messages impersonating the Hermes delivery service. The texts typically claim your parcel failed to deliver, is pending collection, requires payment, or needs you to confirm delivery details. They then direct you to click a link that either steals your login credentials, bank details, or personal information, or installs malware on your phone. The scammers use urgency and concern about a missing package to pressure you into acting quickly without thinking. Hermes is a legitimate UK parcel delivery company owned by Asos, but fraudsters regularly spoof their name and branding in SMS messages. These scams have become extremely common in the UK, with thousands of residents reporting them to Action Fraud each year. The links in these texts often look convincing because they may reference real Hermes domains or use domain names that closely mimic the official site.
Warning signs to look for
["- The message asks you to click a link to 'confirm delivery' or 'pay a fee' — genuine Hermes never requests payment via text links.", "- You receive the text when you're not expecting a parcel, or the tracking details don't match any recent orders.", "- The sender uses a shortcode number (like 7726) or an unusual phone number instead of Hermes's official channels.", "- The link in the message is shortened (like bit.ly or tinyurl) or doesn't match the official Hermes domain (hermes.co.uk).", "- The message contains spelling errors, unusual grammar, or generic greetings like 'Dear Customer' instead of your name.", "- You're asked to enter your Royal Mail, Parcelforce, or other courier details—Hermes wouldn't ask this via text.", "- The message creates false urgency by saying your parcel will be returned or destroyed if you don't act immediately."]
How this scam works step by step
The scam typically begins when you receive an unsolicited SMS claiming to be from Hermes. The message might say your parcel delivery failed, is held at a depot pending payment, or needs address confirmation. It includes a link and instructs you to click it immediately or risk losing your package. When you click the link, you're taken to a fake website that closely mimics the real Hermes or a generic parcel delivery interface. The site prompts you to log in using your email and password, or to enter personal information like your name, address, phone number, and date of birth. Some fake sites ask for payment card details under the pretence of paying a 'customs fee' or 'delivery charge'. Once you enter your information, the scammers capture it and can use it to access your accounts, steal your identity, or sell your data to other criminals. In some cases, the link may install spyware or ransomware on your phone, compromising your security further. Victims often don't realise they've been scammed until they notice unauthorised transactions on their bank account or receive password reset notifications for accounts they didn't request.
How to verify if it is genuine
If you receive a Hermes text, do not click any links in the message. Instead, delete it immediately or report it. To verify whether a parcel is genuinely with Hermes, go directly to the official Hermes website (hermes.co.uk) by typing the address into your browser, or call Hermes customer service on 0344 800 4466 with your order reference number. Never use contact details from the suspicious text message. Check your email for a legitimate Hermes notification—real delivery updates come via email as well, and genuine emails include specific tracking information and your actual name. If you ordered something from a UK retailer, log into your customer account on that retailer's website directly (not via a link in the text) and check the order status there. Real Hermes communications never ask you to click links to confirm payment or update personal details. For more guidance on identifying fraudulent websites, see our guide on /guides/is-this-website-a-scam/. Legitimate parcel companies process failed deliveries through their official app or website, not via unsolicited text requests.
What to do if you have already interacted
If you've clicked the link but didn't enter any information, stop immediately and delete any app that may have been installed. Check your phone for unfamiliar apps in your app store and uninstall them. If you entered your email and password, log into that email account immediately, change your password to something strong and unique, and enable two-factor authentication. Check for any login attempts or password reset requests you didn't make. If you provided your name, address, and phone number only, monitor your credit file via Clearscore (free) or Experian and watch for suspicious credit applications in your name. If you entered your payment card details, contact your bank immediately by calling the number on the back of your card—not any number in the scam text. Ask your bank to cancel the card and issue a replacement. Request a fraud alert be placed on your account and ask them to monitor for unauthorised transactions. Report the scam to Action Fraud (0300 123 2040) and the NCSC, and forward the scam text to 7726. If you've lost money, your bank may be able to recover it under the Contingent Reimbursement Model, especially if you acted quickly.
Reporting this scam in the UK
Report the scam immediately to Action Fraud, the UK's official fraud reporting service, by calling 0300 123 2040 or visiting actionfraud.police.uk. They record your report and share it with law enforcement to help stop the criminals. Forward the scam text message to the NCSC Suspicious SMS Reporting Service by texting the message to 7726 (it's free and you can forward the original message including the scammer's number). The NCSC uses these reports to identify and take down phishing websites and malicious links. You can also report the text directly to your mobile network provider—most UK networks have a spam reporting service accessible through Settings or your provider's app. If you've been financially harmed, file a report with your bank's fraud team as well; they may recover money depending on how quickly you report it. Report the fake Hermes website URL to the Internet Watch Foundation if you visited it. For general advice, contact Citizens Advice consumer helpline on 0808 223 1133. Keep screenshots of the text and any confirmation numbers from your reports, as you may need them if disputing unauthorised charges.
Frequently asked questions
Is Hermes a legitimate company, or should I ignore all Hermes texts?
Hermes is a fully legitimate UK parcel delivery company owned by Asos and used by thousands of online retailers. However, scammers regularly impersonate Hermes via text to trick people. You should not ignore all Hermes texts, but you should verify them by going directly to the official Hermes website or calling their customer service number (0344 800 4466), never using contact details from the suspicious text.
I already paid a 'delivery fee' to the scammers. Can I get my money back?
Contact your bank immediately by calling the number on your card and report the fraudulent payment. If you paid by debit card, bank transfer, or credit card, your bank may be able to reverse the transaction or claim the money back, especially if you report it within hours. UK banks are obligated to refund certain fraud under the Contingent Reimbursement Model. Contact Action Fraud (0300 123 2040) as well and keep evidence of all communications with the scammers.
The link in the text looked very similar to the real Hermes website—how can I tell the difference?
Scammers create fake websites that look almost identical to real ones. The easiest way to spot a fake is to check the URL (website address) in your browser's address bar—it should start with 'https://hermes.co.uk' for the official site. Shortened links (bit.ly, tinyurl, etc.) are almost always scams. Real Hermes will never ask you to click a link to pay fees or enter passwords via text. If you're unsure, never use the link in the text—instead, visit hermes.co.uk by typing it in yourself or calling 0344 800 4466 to check your parcel status directly.
How do I report a Hermes scam text in the UK?
Forward the scam text to 7726, which automatically reports it to the NCSC and your mobile network. You can also report it to Action Fraud by calling 0300 123 2040 or visiting actionfraud.police.uk—provide the sender's phone number and the exact content of the message. If you've lost money, contact your bank immediately and they will file a fraud report on your behalf.