In recent years, the rise of fake delivery text scams has become a significant concern, with Evri (formerly Hermes) being a frequent target for cybercriminals.
These scams involve fraudsters impersonating Evri to steal sensitive personal and financial information from unsuspecting individuals.
In October 2024, Evri recorded a fourfold increase in reported scam incidents and shut down over 12,000 fake websites linked to these fraudulent messages.
What Is the Evri Tracking Scam?
The Evri tracking scam is a phishing technique where fraudsters impersonate Evri (formerly Hermes) to deceive individuals into clicking malicious links or providing sensitive personal details.
These scam attempts typically arrive in the form of text messages or emails and are made to appear as legitimate delivery updates.
Scammers design these messages to look official, using Evri’s logo, brand colours, and structured formatting. They often contain a sense of urgency, such as suggesting a missed delivery, a pending fee, or an issue requiring immediate attention.
The most common methods used in these scams include:
- Sending fake texts about parcel delivery issues
- Requesting small fees to release or redeliver a package
- Providing links to spoofed websites that imitate Evri’s legitimate pages
- Collecting card details, addresses, and login credentials under false pretences
Once a user clicks the link, they are typically taken to a fraudulent website. There, the scam either attempts to steal credentials or initiates a fake payment process. These fake pages often look convincing, especially to someone expecting a real parcel.
How Can You Identify a Fake Evri Delivery Text?
Spotting the difference between a legitimate and fake Evri message can be challenging, but there are tell-tale signs that can help.
These scam texts usually contain poor spelling, suspicious links, and generic messages. Recognising these red flags can prevent becoming a victim.
Look out for:
- Misspelt words or unnatural phrasing, such as “your parcele has returned”
- Links that don’t begin with evri.com or contain unusual characters
- Messages addressed vaguely with “Dear Customer” rather than by name
- Payment requests for minor fees which Evri would not normally charge via SMS
- Unusual sender details, such as mobile numbers or personal email addresses
Why Are Delivery Scams Like This Becoming More Common in the UK?
Delivery scams have risen in the UK due to a cultural and economic shift toward online shopping.
Consumers are receiving more parcels than ever before, making them susceptible to messages that claim there’s an issue with a delivery.
Fraudsters take advantage of this frequency, knowing that recipients are likely to believe a message referencing a parcel.
Several contributing factors include:
- A massive increase in e-commerce activity since 2020
- Consumer reliance on courier updates from various services
- Inconsistent naming conventions across delivery platforms
- The difficulty of tracking every parcel or remembering every retailer used
According to data published by NatWest and Action Fraud, delivery scams now account for over one-third of all reported phishing attacks in the UK.
Text message frauds have overtaken traditional email scams due to higher open rates and immediate visibility.
The Evri brand is commonly targeted due to its recognisability and the high volume of parcels handled across the UK.
What Should You Do If You Receive a Suspicious Evri Text?
Receiving a suspicious message claiming to be from Evri can be unsettling, especially if you’re genuinely expecting a parcel.
Scammers often rely on this exact timing to increase their chances of success. However, taking the right steps immediately can prevent you from falling victim to fraud.
The most important action is to stay calm and avoid engaging with the message until you’ve verified its legitimacy.
Reacting too quickly, such as clicking a link or responding, can expose your personal or financial information.
Here’s a step-by-step guide on what to do:
1. Don’t Click on Any Links
One of the most common tactics used in Evri tracking scams is to embed a malicious link in the message. These links may lead to:
- Fake Evri websites designed to steal personal details
- Phishing pages asking for login credentials or payment
- Pages that attempt to install malware or tracking cookies on your device
Never click the link, even if it appears to look legitimate. Scammers often use techniques like “URL masking” to make it seem like the link leads to evri.com when it doesn’t.
2. Do Not Respond to the Message
Replying to the text, even just to say “stop” or “unsubscribe,” can confirm to scammers that your number is active. This could lead to more scam attempts or your number being sold to other fraud networks.
Silence is the best policy. Delete the message after taking the necessary steps to report it.
3. Screenshot the Message
Before deleting the message, take a screenshot. This could be helpful if you need to report the scam to:
- Your mobile provider
- Action Fraud
- Evri’s customer service
- Legal or cybercrime investigators
Make sure the screenshot clearly shows the sender’s number and the full message content.
4. Verify the Message Independently
If you’re concerned that the message might be real, especially if you’re waiting for a delivery, visit Evri’s official website directly. Do not use any links from the suspicious message.
Instead, type www.evri.com into your browser or use the Evri mobile app. Enter your parcel tracking number manually, or contact their customer service team to check whether any delivery issues exist.
You can also check the sender information:
- Legitimate Evri texts will usually come from a branded shortcode, not a mobile number
- Emails from Evri should be from an address ending in @evri.com, not generic domains like Gmail or Yahoo
5. Forward the Message to 7726
In the UK, the number 7726 is a free spam-reporting service offered by most mobile networks, including EE, O2, Vodafone and Three. By forwarding scam texts to 7726, your provider can investigate and potentially block the sender.
To do this:
- Open the suspicious message
- Tap “Forward” and send it to 7726
- You may receive a follow-up asking for the sender’s number reply to that with the number or sender ID
This quick step helps network providers clamp down on widespread scams.
6. Report the Scam to Action Fraud and NCSC
If the message contained a fraudulent link or requested payment, it should also be reported to the relevant cybercrime authorities:
- Action Fraud: Visit www.actionfraud.police.uk to file an online report.
- NCSC (National Cyber Security Centre): Forward phishing emails to report@phishing.gov.uk. While they focus mainly on email scams, if you’ve been redirected to a phishing site, they may investigate further.
These organisations monitor ongoing scams and can take down dangerous websites or issue public warnings.
7. Delete the Message from Your Device
Once the message has been documented and reported, it’s best to delete it. Keeping scam messages in your inbox increases the chance of accidental clicks, especially if you’re distracted or sharing your device.
Deleting also helps ensure that others using your phone such as children or elderly family members, aren’t tricked into engaging with the message.
8. Monitor for Follow-Up Scams
In some cases, scammers may send additional follow-up messages or try to reach you via another method, such as email. If you’ve interacted with the original message at all, be extra cautious about:
- Emails or calls from unknown contacts
- New scam attempts referencing your name or parcel details
- Messages demanding urgent payment or verification
It may also be helpful to check if your personal data has been leaked using services like Have I Been Pwned, particularly if you suspect your information has already been compromised.
How Can You Protect Yourself From Future Parcel Delivery Scams?
Protection starts with digital hygiene and being cautious when dealing with unexpected communications.
Avoiding scam messages entirely isn’t always possible, but reducing risk and recognising fraud early makes a big difference.
Effective ways to stay protected:
- Activate spam filters and anti-phishing protection on your mobile and email accounts
- Install security software that blocks access to fake or high-risk websites
- Use strong passwords and never reuse the same password across multiple platforms
- Enable two-factor authentication (2FA) on email, banking, and delivery accounts
- Keep software and apps up to date to patch known vulnerabilities
- Regularly monitor financial accounts for any unauthorised activity
Many banks and antivirus providers now offer real-time scam alerts and website verification tools. Taking advantage of these services can enhance protection considerably.
Are There Any Real Examples of the Evri Tracking Scam?
Yes, various examples have been shared by victims and consumer protection agencies. These scam messages often mimic genuine updates and create false urgency to trick the recipient.
Examples include:
- “We tried to deliver your package today but missed you. Please reschedule at [fake-link].”
- “Your parcel from Evri is on hold due to unpaid customs charges. Pay now: [spoofed-URL].”
- “Action Required: Your delivery will be returned unless rescheduled here: [malicious-link].”
These scams are often timed around holidays or high delivery periods like Black Friday, Christmas, and back-to-school seasons.
Scam emails may also use similar wording or formats, making it essential to verify every communication, especially if you weren’t expecting a delivery.
What Are the Consequences If You Fall for an Evri Scam?
Falling for an Evri scam can lead to both immediate and long-term consequences. These may include financial loss, stolen identity, or exposure to further fraud attempts.
Many scammers sell compromised personal information to other fraud networks, increasing the risk of repeated targeting.
Consequences can include:
- Financial fraud: Unauthorised charges or drained bank accounts
- Account takeover: Loss of access to email, shopping, or financial services
- Identity theft: Use of your personal details for credit applications or online fraud
- Emotional distress: Anxiety or embarrassment related to falling victim
If someone has been scammed, they should:
- Contact their bank or credit card provider immediately
- Change all passwords associated with affected accounts
- Check their credit report for unfamiliar activity
- File a report with Action Fraud and NCSC
- Seek legal or financial recovery advice if money was lost
Recovering from identity theft or fraud can take time. Acting swiftly minimises the damage and helps with potential compensation or reimbursement.
Can Evri or Other Delivery Companies Prevent These Scams?
While Evri and other logistics companies invest in scam prevention measures, including domain monitoring and customer alerts, it is not always possible to eliminate every fraudulent site or message. Cybercriminals frequently shift strategies and use sophisticated tactics to evade detection.
Evri has publicly acknowledged the challenges and responded by:
- Publishing educational guides about scam detection
- Reporting and taking down thousands of spoofed websites
- Encouraging consumers to only use their official channels
- Providing examples of scam messages to raise awareness
That said, consumer caution is still the most reliable safeguard. Remaining sceptical of unsolicited communications and verifying details independently remains key in stopping scams before they start.
Conclusion
The Evri tracking scam is part of a wider epidemic of phishing and delivery fraud in the UK. As scammers grow more sophisticated, it’s vital to stay informed, vigilant, and proactive.
By recognising the warning signs, reporting suspicious activity, and avoiding risky behaviour online, individuals can protect themselves and their finances.
If you believe you’ve fallen victim, act quickly—contact your bank, report the incident, and consider seeking legal help through trusted scam recovery services like CEL Solicitors.
FAQs
What should I do if I clicked a fake Evri link?
If you’ve clicked on a suspicious link, immediately disconnect from the internet, scan your device with antivirus software, and reset any compromised passwords. Then report the incident to Action Fraud and your bank.
Can Evri verify if a message is genuine?
Yes, you can contact Evri’s official customer service to verify any questionable messages. They also provide guidance on spotting scams on their website.
How common are fake delivery text scams in the UK?
Fake delivery texts are the fastest-growing type of scam in the UK, according to recent banking reports and fraud watchdogs like Action Fraud and NatWest.
How can I check if a tracking number is legitimate?
Always go directly to the Evri website and enter the tracking number. Avoid using any link provided in a message unless you’re sure it’s official.
Can scammers steal my bank details through these texts?
Yes. If you enter personal or banking details into a fraudulent website, they can be harvested and used for theft or sold on the dark web.
Which organisations handle scam prevention in the UK?
The key bodies include Action Fraud, NCSC, Citizens Advice, and your mobile network provider via the 7726 text reporting system.
Are there tools to automatically block scam messages?
Yes, many smartphones and telecom providers offer scam filters. Apps like Truecaller and antivirus programs with phishing protection can help as well.
