Royal Mail customers issued scam warning ahead of Christmas

Royal Mail customers across the UK are being urged to take care with unexpected texts and emails that claim a delivery has failed and ask them to follow a link.

The warning comes as people prepare to send and receive Christmas parcels, with the National Cyber Security Centre (NCSC) saying missed-parcel scams become more prevalent during the festive period.

Azza Kidiwala, an iPhone tech expert at Techwala, said: “An expected parcel can make an unexpected text feel believable because you're already waiting for an update.

“A useful habit, I think, is to leave the message alone for a moment before deciding what to do, so its urgency doesn't make the decision for you.”

Royal Mail says warning signs include messages claiming a parcel could not be delivered and asking for a fee, shortened links, unfamiliar web addresses and requests for login or payment details.

Emails that ask recipients to reschedule a delivery through a link are another sign to watch for, according to the company's scam guidance.

It says it does not request payment for an underpaid item by text or email, instead leaving a grey “Fee to Pay” card.

However, a fee mentioned in a message is not automatically proof of a scam.

Royal Mail says it may send a text or email about customs charges when the sender has supplied the recipient's contact details, alongside a grey card.

Rather than following an unexpected link, customers can check the delivery through the official Royal Mail website or app, opened independently.

The NCSC says some scam messages direct people to apps that appear to be official parcel trackers but are actually malicious software capable of stealing passwords and banking details.

The NCSC advises people not to click links in suspicious missed-parcel messages or install apps if prompted.

Suspicious texts can be forwarded free to 7726 and deleted after reporting, while suspicious emails can be forwarded to report@phishing.gov.uk.

Anyone who has entered bank details should contact their bank immediately and explain what information they shared.

If a password has been disclosed, change it on the genuine website or app and on any other accounts where it was used.

The NCSC says people who think they have installed malware should not log into accounts on the affected device and should follow its guidance on resetting it.

A factory reset removes personal data from the phone, and the centre warns against backing up the device beforehand because the backup could contain the malware.

Last posting dates for Christmas 2026

Royal Mail's last recommended UK posting dates for Christmas 2026 depend on the service used.

For Second Class and Second Class Signed For, the deadline is Friday, December 18; for Royal Mail Tracked 48, it is Saturday, December 19.

First Class, First Class Signed For and Royal Mail Tracked 24 should be posted by Monday, December 21.

The last recommended date for Special Delivery Guaranteed is Wednesday, December 23.

Royal Mail advises posting as early as possible and says the dates are subject to change.

The Post Office says parcels must be received before the branch's final acceptance time, which varies between branches, so customers should check before posting.

People sending items abroad should allow plenty of time and check the company's international country guides for delivery aims.

More details, including Parcelforce and British Forces Post Office deadlines, are in our guide to the Christmas posting dates.