Fake DPD missed delivery text links to convincing copycat website stealing card details

What is this scam?

Which? has flagged an active DPD smishing scam in which text messages claim a delivery attempt was made and direct recipients to a convincing DPD copycat website to pay a £1.99 redelivery fee. The fraudulent site uses DPD's genuine colours, logo, and layout and asks for full name, home address, phone number, email address, and complete card details including the security code. Entered payment details are harvested for use in subsequent fraud rather than applied to any delivery charge. DPD never requests payment or personal details via an unsolicited text link — any genuine delivery status can be confirmed directly at dpd.co.uk using the parcel tracking number.

Example scam message

Red flags to look out for

• The message creates urgency — threatening a fine, missed delivery, or account closure.
• Links lead to unofficial domains that don't match the real company's website.
• You weren't expecting this message and can't verify the event it references.
• It asks you to confirm payment details or personal information via a link.
• The sender's number or email address doesn't match the company's official contact.

What to do if you receive this

1. Do not click any links or pay any fee mentioned in the message.
2. Check your parcel status directly on the courier's official website using your tracking number.
3. Forward the message to 7726 (free spam reporting, works on all UK networks).
4. Report it to Action Fraud at actionfraud.police.uk.