Egidio
Security · Smishing · Parcels

The fake Evri/Royal Mail text: one of the UK's most common scams right now

"There's a small fee to pay before we can deliver your parcel." Fake delivery texts impersonating Royal Mail, Evri, DPD or Amazon are, right now, one of the most reported scams in the UK.

Protect yourself from these scams with Egidio Egidio detects and blocks fake delivery and government sites
What Evri actually says: Evri's texts only ever send a tracking link and never ask for payment or an app install. Genuine text updates show "Evri" as the sender, not an unknown mobile number, and real links use the evri.link format.

How the fake delivery text works

Step 1

The believable trigger

You get a text claiming there's a parcel waiting — plausible, since most people genuinely have something in transit at any given time.

Step 2

The small fee

The text asks for a small redelivery or customs fee, often around £1.99 — deliberately low to feel too trivial to question.

Step 3

The convincing site

The link opens a page that looks genuinely like the courier's site, with a payment form waiting.

Step 4

The real cost

Entering card details there hands them to criminals who typically take far more than the small fee shown — the £1.99 is the hook, not the theft.

How to spot it

What to do if you get this text

  1. Don't click. Even loading the page can be enough for a sophisticated operation to fingerprint your device.
  2. Report it: Forward the message to 7726 — free on every UK network, recommended by Ofcom and the NCSC. It sends the message and sender's number to your network for investigation and blocking.
  3. Check the real way: Track any genuine parcel directly through the courier's official app or website, typed manually.

Egidio: your automatic phishing detector

These texts work because almost everyone has a parcel in transit somewhere, almost always. Egidio catches the moment the link tries to load.

Egidio screens incoming calls and scans links arriving through your messaging apps in real time. When it recognises a fake delivery site, it blocks the page before it loads — no need to remember every sender name or link format yourself.

Install Egidio