Royal Mail scams

Scammers send emails, texts and links that look like they come from Royal Mail, to take your password, card details or money. Here is how to tell a fake from the real thing, and how to report one so it gets taken down.

Got a Royal Mail message you are not sure about?

Don't click the link in it. Paste the link into ScamX and we'll tell you whether it really goes to Royal Mail.

Check the link

The real Royal Mail addresses

Royal Mail's own sites end in:

  • royalmail.com

Read the address up to the first single slash: it must end with one of these. An extra word, a different ending or a shortened link means it is not Royal Mail, however real the page looks. When in doubt, type the address yourself or use the Royal Mail app.

What fake Royal Mail messages look like

  • Texts saying your item was returned to a local facility or is held at a warehouse
  • Emails asking for a customs fee, or pretending to be HMRC or customs
  • Failed delivery or "address incomplete" emails asking you to reschedule through a link

What Royal Mail says

  • Royal Mail only emails or texts you if the sender asked for tracking updates.
  • Royal Mail never asks for passwords or bank details, or asks you to enter information on an unknown website.
  • Underpaid postage is requested with a grey "Fee to Pay" card through the door, not by email or text.

How to report a Royal Mail scam

  1. Tell Royal Mail. Forward the email, or send a screenshot of the text: [email protected]. Or: Forward the text to your mobile provider (free): text 7726.
  2. Get the fake site taken down. Scan the link: the report names the company hosting it and the registrar of its domain, with a ready-written message for each.
  3. Put a warning in front of everyone else. Report the link to Google Safe Browsing and Microsoft SmartScreen.
  4. If you lost money or shared details, call your bank first, then report it to the police or your national fraud line. Where to report in your country.

Royal Mail's reporting route checked against Royal Mail's own page on 2026-10-10. ScamX is not affiliated with Royal Mail.