Christmas Shopping Alert: Protect Yourself From ‘Spray and Pay’ Delivery Scams!

After scoring several deals during the build-up to Black Friday, you might have completed most of your holiday shopping.

Therefore, receiving a text message about a delivery issue might not seem out of the ordinary. A simple tap on a provided link and you’re asked to pay a £2 fee for redelivery.

Unfortunately, the supposed parcel does not exist, and by interacting with the link, you’ve inadvertently given your banking details to a criminal network. This group has been bombarding mobile users across the UK with similar messages following one of the busiest shopping days of the year.

Government bodies, mobile operators, and delivery services have all issued alerts as fraud incidents soar during the holiday season. The chaotic time leads many to expect multiple parcel deliveries, making it easier for fraudsters to deceive.

Evri, a leading courier company in the UK, reported receiving 10,000 complaints of delivery-related scams between November 2024 and January 2025.

Lee Howard, who oversees information security at Evri, mentioned that their daily barrage of thousands of fraudulent messages, a tactic known as “spray and pay,” ensures that some messages will reach individuals actually expecting a parcel.

Howard emphasizes that Evri would never charge for redelivery. “We attempt to deliver three times before returning an item. There is never a redelivery fee,” he states.

The Anatomy of the Scam

The scam typically begins with a text message claiming that your delivery couldn’t be completed, directing you to a website to reschedule.

“Sorry! for the inconvenience but there seems to be a problem with your parcel. Please visit: (the name of the scam site) to resolve this. Thanks!” is an example provided by Virgin Media O2.

Another reads, “When our driver attempted to deliver today, nobody was present. Visit (the name of the scam site) to track and reschedule delivery.”

Yet another message states, “Your package is waiting at your local depot. To arrange a delivery date, go to (the name of the scam site).”

These messages create a sense of urgency and typically do not address you by name, as noted by Murray Mackenzie, director of fraud prevention at Virgin Media O2.

Following the link often leads to a website mimicking a legitimate courier service, where you might be prompted to pay a small fee to rearrange the delivery.

The scammers, often organized crime groups, are primarily fishing for personal data.

“The ideal outcome for a scammer is to get hold of your payment details,” Mackenzie explains. “But even something as simple as your email and a password can lead to redirected future deliveries or make you a target for more scams.”

Guardian readers have previously reported that information provided in such scams was later used by other fraudsters posing as bank officials.

Some criminal groups may make small, unnoticeable withdrawals over a long period, while others might attempt a large transaction during busy times, hoping it won’t be detected.

The National Cyber Security Centre (NCSC) also warns that these fraudsters might encourage the download of malware through these deceptive links to further access personal information.

How to Respond

Always take a moment to verify any text message before responding.

“If you’re expecting five parcels and you receive 27 messages, 22 of them are likely scams,” advises Mackenzie.

Know which courier is supposed to deliver your parcels and expect correspondence only from them.

Be skeptical of messages that lack personal details or originate from unfamiliar numbers.

If you mistakenly provide your banking information, contact your bank immediately. Alert them if you receive notifications of unauthorized attempts to make charges.

Report any fraudulent texts through your messaging app or forward them to 7726, then delete the message. This helps your phone company prevent similar scams from reaching others.