Guidance Article

Fake DPD Redelivery Fee Texts: How UK Shoppers Can Spot the £1.99 Parcel Smishing Scam and Report It to 7726

Published on 15 May 2026 | Cybersecurity

Fake DPD redelivery fee texts are still being reported in the UK. A common version claims that a parcel could not be delivered and asks you to pay a small redelivery charge, often around £1.99, through a link. The amount and wording can change, so treat any unexpected delivery text asking for payment or personal details as suspicious.

This article explains how the scam works, why it matters, who is most likely to be affected, and how to report a suspicious text to 7726.

What has happened?

Scammers are sending text messages that impersonate DPD and other delivery companies. The message usually says there is a problem with a parcel, a missed delivery, an incomplete address, or a small fee to pay before redelivery can be arranged.

The link in the message may lead to a copycat website that looks like a genuine courier page. It may ask for your name, address, date of birth, card number, security code, or a one-time passcode. Recent scam-tracking reports in spring 2026 describe DPD-branded texts using this pattern, but the exact wording, fee and web address can vary. It is not always possible to tell whether these messages are part of one campaign or several copycat scams. (onlinethreatalerts.com)

The National Cyber Security Centre (NCSC) has long warned about “missed parcel” SMS scams and advises people to avoid links in suspicious delivery messages, check parcels through official courier websites or apps, and forward suspicious texts to 7726. (ncsc.gov.uk)

Why this matters

The £1.99 fee is not the main target. The small payment is usually bait to collect card details and personal information. Once scammers have those details, they may attempt larger payments, contact you pretending to be your bank, or use your information in future fraud attempts.

UK Finance has warned that malicious delivery texts can be part of a wider scam. In some cases, after a victim enters details on a fake site, criminals may follow up with a phone call pretending to be the victim’s bank and try to persuade them to move money to a so-called “safe account”. (ukfinance.org.uk)

The issue is also widespread. Ofcom said that half of UK mobile users reported receiving a suspicious message by text or iMessage between November 2024 and February 2025, and estimated that 100 million suspicious messages were reported to mobile operators through 7726 in the year to April 2025. (ofcom.org.uk)

Who may be affected?

Anyone with a mobile phone can receive one of these texts, but the scam is particularly convincing if you are:

  • waiting for an online order;
  • expecting a DPD parcel or any courier delivery;
  • busy, distracted or dealing with several deliveries at once;
  • shopping during sales periods, bank holidays or busy delivery seasons;
  • helping an older relative or someone less confident with online services.

You do not need to have a real DPD parcel on the way to receive the scam. Criminals often send large numbers of messages and rely on the chance that some recipients are expecting deliveries.

Warning signs of a fake DPD redelivery text

Look out for these red flags:

  • A small payment request: for example, a £1.99, £1.50 or £2.99 redelivery, postage or handling fee.
  • Pressure to act quickly: wording such as “final notice”, “within 24 hours”, “returned to sender” or “delivery suspended”.
  • A suspicious link: the address is not the official DPD website, contains extra words, random letters, hyphens, or an unusual ending.
  • No clear tracking reference: or a reference that does not match anything in your order confirmation.
  • Requests for card details or security codes: especially if the message arrived unexpectedly.
  • Poor spelling or odd formatting: although some scam messages now look quite polished.
  • A sender that looks strange: such as a normal mobile number, an overseas number, or a sender name that is slightly different from what you would expect.

Be aware that sender names can be misleading. Official DPD guidance in some countries warns that SMS sender fields can be manipulated, making a message appear to come from a trusted brand. (dpd.com)

How to check a DPD delivery safely

If you think the message might relate to a real parcel, do not use the link in the text. Instead:

  • open the retailer’s website or app and check your order status;
  • use the official DPD app if you already have it installed;
  • go to DPD’s official tracking page yourself and enter the tracking number manually;
  • only download courier apps from official app stores such as the Apple App Store or Google Play.

The NCSC lists DPD Track It as the official route for checking DPD parcels and advises using official courier websites or apps rather than links in unexpected texts. (ncsc.gov.uk)

What to do if you receive a suspicious DPD text

  1. Do not click the link.
  2. Do not reply to the message.
  3. Take a note of the sender number if one is shown.
  4. Forward the text to 7726. This is free on most UK mobile networks.
  5. Delete the message after reporting it.
  6. Block the sender if your phone gives you that option.

GOV.UK says suspicious text messages should be forwarded to 7726 for free, which reports the message to your mobile provider. (gov.uk)

How to forward a scam text to 7726

On an iPhone or iPad, the NCSC advises pressing and holding the message bubble, tapping “More”, selecting the message, tapping the forward arrow, entering 7726, and sending it.

On Android, the NCSC advises opening the conversation, pressing and holding the message, using the menu option to forward it, entering 7726, and sending it. If 7726 does not work on your device or network, contact your mobile provider for its reporting method. (ncsc.gov.uk)

What if you clicked the link?

If you clicked but did not enter any details, close the page. Do not download anything and do not continue through the form. If your phone asks you to install an app or profile, cancel it.

If you entered personal information, change any passwords you submitted and update the same password anywhere else you used it. Set up two-step verification on important accounts where possible. The NCSC also recommends keeping devices updated and using official app stores only. (ncsc.gov.uk)

What if you entered card details or paid the £1.99?

Act quickly, even if only a small amount was taken:

  • Contact your bank immediately using the number on the back of your card, your banking app, or a trusted route.
  • Freeze or cancel the card if your bank advises it.
  • Do not share one-time passcodes with anyone who calls or texts you.
  • Watch for follow-up calls pretending to be from your bank, DPD, the police or a fraud team.
  • Report the fraud if you lost money or your account was misused.

If you are worried that a call about your bank is part of a scam, you can hang up and use 159, which Stop Scams UK says connects customers of more than 99% of UK retail bank current accounts safely and directly with their bank. (stopscamsuk.org.uk)

How to report it if you lost money

If you are in England, Wales or Northern Ireland and believe you have been the victim of fraud, Ofcom advises reporting it to Report Fraud / Action Fraud by calling 0300 123 2040 or using the Report Fraud website. If you are in Scotland, reports of fraud and financial crime should be made to Police Scotland via 101. (ofcom.org.uk)

GOV.UK also says that if you think you have lost money or been hacked because of an online scam or fraud, you should contact Report Fraud if you are in England or Wales, and Police Scotland if you are in Scotland. (gov.uk)

Current developments in the UK

Scam texts are a live policy issue, not just an individual nuisance. Ofcom’s consultation on combatting mobile messaging scams was published on 29 October 2025, closed on 28 January 2026, and was last updated on 10 April 2026. Ofcom says it plans to publish its final decision in summer 2026. (ofcom.org.uk)

The government’s Fraud Strategy 2026 to 2029 was published on 9 March 2026 and last updated on 30 April 2026. It sets out plans to disrupt fraud, strengthen public and business resilience, and improve victim support through the new Report Fraud service. (gov.uk)

For shoppers, the practical advice remains the same: pause before clicking, check deliveries through official channels, and report suspicious texts to 7726.

How to stay safer next time

  • Keep a list of expected parcels. Check the retailer’s order page before trusting a delivery message.
  • Use official apps and websites. Type the address yourself or use a saved bookmark.
  • Do not pay courier fees through unexpected links. Verify any payment request directly with the courier or retailer.
  • Be careful with urgency. “Act now” messages are designed to stop you thinking clearly.
  • Use strong, unique passwords and a password manager if helpful.
  • Turn on two-step verification for email, banking, shopping and mobile provider accounts.
  • Keep your phone updated. Install security updates when prompted.
  • Talk to family members. A calm warning can help someone avoid losing money.

Take Five to Stop Fraud summarises the mindset well: stop and think before parting with money or information, challenge whether a request could be fake, and protect yourself by contacting your bank immediately if you think you have been scammed. (takefive-stopfraud.org.uk)

Key takeaway

A DPD text asking for a small redelivery fee such as £1.99 should be treated with caution, especially if it includes a link. Do not click, do not pay, and do not enter personal or card details. Check your parcel through the official DPD website, app or retailer, then forward the suspicious text to 7726 and delete it.