Royal Mail Warns Against £2.99 Scam Fee Amid Phishing Threats

Mirror

Royal Mail Warns Against £2.99 Scam Fee Amid Phishing Threats

First seen 22 Sep 2026, 06:09 UTC • •55.5

Article Content

1 / 5

Browse articles

ThreatCluster •September 23, 2026 at 05:32 UTC

•Royal Mail warns against a phishing scam involving a £2.99 fee.
•Scammers impersonate Royal Mail in fake text messages to steal personal information.
•Customers are advised to report suspicious communications to Royal Mail and NCSC.

Royal Mail has issued a warning to customers about a phishing scam involving a fraudulent £2.99 fee for package collection. The scam involves fake text messages that direct recipients to a bogus website designed to steal personal information. Royal Mail advises customers to avoid clicking links in suspicious communications and to report any scams to their official email. The National Cyber Security Centre (NCSC) supports this warning, encouraging users to report suspicious messages by forwarding them to 7726. The scam is particularly concerning as it coincides with the holiday season when package deliveries increase. Royal Mail has provided guidance on how to recognize and report these scams, emphasizing vigilance in communications. The potential impact includes identity theft and financial loss for unsuspecting customers.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 48d ago How this analysis works

Timeline

2026-09-21

Royal Mail issues scam warning

Royal Mail alerts customers about a phishing scam involving a £2.99 fee for package collection, urging vigilance.

2026-09-21

NCSC supports Royal Mail's warning

The National Cyber Security Centre encourages reporting suspicious texts to help combat phishing scams.

Recent

Increased scam activity noted

With the holiday season approaching, reports of similar scams have surged, prompting Royal Mail's advisory.

More articles in this cluster (4)

Threat Graph

4 entities, 3 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (4)

Phishing
T1566.001 - Spearphishing Attachment
T1566.002 - Spearphishing Link
T1566 - Phishing

Relationships

Phishing related to T1566.001 - Spearphishing Attachment
Phishing related to T1566.002 - Spearphishing Link
Phishing related to T1566 - Phishing

Continue Reading

Critical RCE Vulnerability in Confection WordPress Plugin (CVE-2026-115252) A critical vulnerability, CVE-2026-115252, has been identified in the Confection WordPress Cable plugin, affecting versions 0.4.0 to 0.4.7. This flaw allows unauthenticated attackers to execute arbitrary PHP code on the server by writing unmodified settings into a PHP file without proper checks. The vulnerability has…

CVE-2026-121392 in FreeRDP Exposes RDP Sessions to Interception A vulnerability, CVE-2026-121392, has been identified in FreeRDP versions prior to 3.32.2, which allows man-in-the-middle attackers to bypass server identity checks. The flaw arises from improper certificate validation in the tls_verify_certificate() function, permitting attackers with a trusted certificate to…