IPS Delivery Scam: Protect Yourself From Online Fraud
The IPS delivery scam is a phishing attempt, not a delivery problem. You receive a text or email claiming a parcel could not be delivered and asking for a small fee to rearrange it.
The fee is not the point. The purpose is to capture your card details and personal data, which are then used for far larger fraud — or to sell on. The sums requested are deliberately trivial so they feel safer to pay than to question.
Genuine couriers do not text you for card details to release a parcel. If you are expecting something, go to the courier's own website and track it there rather than tapping the link.
Key Takeaways
- The IPS Delivery Scam is a fraudulent operation that preys on individuals who are anticipating package deliveries.
- The scam typically starts with a text message appearing to be from IPS or a similar delivery service. These messages often contain alarming content, claiming issues with the recipient's package delivery. In their attempt to resolve the problem, recipients are urged to click on a link provided in the message.
- This link redirects them to a phishing website. On the phishing website, scammers employ various tactics to trick victims into divulging sensitive information, such as credit card details or login credentials.
- If you receive an unexpected text message about a package delivery, be cautious and thoroughly scrutinise the message for potential red flags.
At a glance
- What it is
- A fake delivery text (smishing)
- Never
- Click the link or enter card details
- Report suspicious texts to
- 7726 (free)
- Report fraud to
- Action Fraud
If you entered your details, do not wait to see what happens. Work through this now — the steps are ordered so the ones that limit the damage come first.
🛡️ Build your recovery plan
Tick what applies to you. The order below is deliberate — most of these organisations will ask for your Action Fraud reference number, so doing it in this sequence saves you making the same call twice.
Nothing ticked yet — the steps below are the ones that apply to everyone. Tick a box above to add the rest.
- 1
Report it to Action Fraud and get your crime reference number
Action Fraud — the national reporting centre for fraud
- Onlinereportfraud.police.uk
- Phone0300 123 2040
Do this second, and do it before you contact anyone else. Almost every organisation in this list — lenders, credit reference agencies, debt collectors — will ask for the crime reference number Action Fraud gives you, and without it you end up making the same call twice. It also creates the official record you'll rely on if you have to dispute anything later. Expect an update within 28 working days, though that's about the investigation, not about clearing your name; that part is on you and starts now.
Have ready: What happened and roughly when · Any account or reference numbers involved
- 2
Get all three credit reports and read every line
Experian, Equifax and TransUnion
- Experian0800 013 8888
- Equifax0800 014 2955
- TransUnion0330 024 7574
All three, not one. Lenders report to different agencies, so a fraudulent account can sit on one file and be invisible on the others — checking a single report is the most common way people miss the second and third account. You're looking for accounts you didn't open, searches you didn't authorise, and addresses linked to your name that you've never lived at. That last one matters more than it sounds: a linked address you don't recognise is often how the fraud was set up in the first place.
Have ready: Your addresses for the last six years
- 3
Add a CIFAS protective registration
CIFAS — the UK fraud prevention service
- Onlinecifas.org.uk
- Phone0330 460 9601
This puts a warning flag against your name in the National Fraud Database, so member organisations run extra identity checks before granting credit in your name. It costs £30 and lasts two years. It does not affect your credit score, and it doesn't touch accounts you already hold — but it will make your own applications slower, which is the trade-off. If someone has your details, that's usually a trade worth making. Note that not every application is checked against the database, so treat it as a strong deterrent rather than a lock.
- 4
Check you're on the electoral register at the right address
Your local council
A quick one that's worth doing while you're here. The electoral roll is one of the main ways lenders confirm you live where you say you do, and being missing from it both weakens your own applications and makes it easier for someone to claim your identity elsewhere.
- 5
Escalate if you get nowhere
Financial Ombudsman Service, or the ICO
- Financial Ombudsman0800 023 4567
- ICOico.org.uk
If a bank refuses to refund you, or a lender won't remove an entry it has accepted is fraudulent, complain to the firm first and give it eight weeks. After that — or as soon as you get a final response — take it to the Financial Ombudsman. It's free and its decisions bind the firm. Where the argument is specifically about inaccurate data staying on your credit file, the Information Commissioner's Office can also look at it. Both routes cost you nothing.
- 6
Close the door behind you
You
Change passwords on your email account first, not your banking — email is the master key, because it's where password resets land. Turn on two-factor authentication wherever it's offered. If documents were lost or stolen, report the passport or driving licence to the issuing body so it can be flagged. And set a reminder to re-check your credit reports in three months: fraudulent applications sometimes surface long after the original breach.
Contact details and process reflect Action Fraud, CIFAS, the credit reference agencies and National Debtline guidance for England and Wales. Scotland reports fraud through Police Scotland on 101 rather than Action Fraud; the rest of the process is the same. General information, not legal advice — free, independent help is available from National Debtline, Citizens Advice and StepChange.
What is the IPS Delivery Scam?
The IPS delivery scam is a fraudulent scheme that targets individuals expecting package deliveries. Scammers impersonate reputable delivery services, such as IPS, and send text messages claiming that there is an issue with the delivery.
The messages often state that there are unpaid customs fees or other reasons why the package cannot be delivered. The goal is to trick recipients into clicking on a link provided in the message, which leads to a phishing website.
How does the IPS Delivery Scam Work?
The scam begins with a text message that appears to be from IPS, notifying the recipient of an issue with their package delivery. The message typically contains a link that the recipient is urged to click on to resolve the problem.
However, this link redirects the recipient to a phishing website designed to mimic the official IPS website. Once on the phishing site, scammers attempt to trick victims into entering personal information, such as credit card details or login credentials.
This information is then used for fraudulent purposes, such as identity theft or financial fraud.
Recognising the IPS Delivery Scam
Common Characteristics of Scam Text Messages
Scam text messages often exhibit certain characteristics that can help you identify them and avoid falling victim to the IPS delivery scam. Here are some common red flags to watch out for:
Generic greetings
Scammers usually use generic greetings like "customer" or "account holder" instead of addressing you by name.
Suspicious sender details
Check the sender's phone number or email address. Legitimate delivery services will use official contact information, while scammers often use random or unfamiliar addresses.
Urgency and time limits
Scam messages often create a sense of urgency, pressuring recipients to act quickly without taking the time to think.
Poor grammar and spelling
Many scam messages contain grammatical errors and misspellings, which can indicate that they are not from a reputable source.
Identifying Phishing Websites
Phishing websites aim to deceive users into entering their personal information by imitating legitimate websites. Here are some signs that can help you identify a phishing website:
Suspicious URLs
Phishing websites often use URLs that closely resemble the official website but contain slight variations or additional characters.
Lack of security indicators
Legitimate websites usually have security indicators, such as HTTPS and a padlock icon in the address bar. Phishing websites may lack these indicators.
Requests for sensitive information
Legitimate websites rarely ask for sensitive information, such as credit card details, through email or text messages. If a website prompts you to provide such information, it may be a phishing attempt.
How to Stay Safe from the IPS Delivery Scam
Tips for Avoiding Falling Victim to the Scam
Be cautious of unsolicited text messages
If you receive a text message regarding a package delivery that you were not expecting, exercise caution and scrutinise the message for red flags.
Verify with the official source
If you are unsure about the authenticity of a delivery notification, contact the official customer support channels of the delivery service directly to confirm the status of your package.
Avoid clicking on suspicious links
Do not click on any links in text messages or emails that seem suspicious or unfamiliar, especially if they request personal information or payment.
Keep your devices and software up to date
Regularly update your devices and software with the latest security patches to minimise vulnerabilities that scammers can exploit.
Best Practices for Online Security
Use strong, unique passwords
Create strong passwords for your online accounts and avoid using the same password for multiple accounts. Consider using a password manager to securely store and generate passwords.
Enable two-factor authentication (2FA)
Activate 2FA whenever possible to add an extra layer of security to your online accounts. This helps protect your accounts even if your password is compromised.
Be cautious of sharing personal information online
Be mindful of the information you share on social media platforms and other online channels. Limit the amount of personal information you make publicly available.
Install reputable security software
Use reputable antivirus and anti-malware software to protect your devices from malicious software and phishing attempts.
Regularly review your financial statements
Keep a close eye on your bank statements and credit card transactions to detect any unauthorised activity. Report any suspicious charges immediately to your financial institution.
Reporting the IPS Delivery Scam
Steps to Report the Scam to Relevant Authorities
If you have received an IPS delivery scam text, it is important to report it to the relevant authorities. Here are the steps you can take:
Save the text message
Take a screenshot or note down the details of the scam text message, including the sender's phone number or email address.
Forward the text to 7726
If you receive a suspicious text, forward it free of charge to 7726 (which spells "SPAM" on a keypad). This reports it to your mobile network so they can investigate and block the sender. You can forward suspicious emails to report@phishing.gov.uk.
Report it to Action Fraud
If you've lost money or handed over personal or card details, report the scam to Action Fraud at actionfraud.police.uk or on 0300 123 2040. In Scotland, report it to Police Scotland on 101.
Report to the delivery service
Inform the official delivery service, such as IPS, about the scam text message. They may have dedicated channels for reporting fraudulent activity.
Report to your mobile network provider
Notify your mobile network provider about the scam text message so they can take appropriate action and prevent further scams.
Sharing Your Experience to Raise Awareness
Sharing your experience with the IPS delivery scam can help raise awareness and prevent others from falling victim to the same scam. Consider reporting the scam on social media, online forums, or community platforms where others can benefit from your insights and learn how to protect themselves.
In conclusion, the IPS delivery scam is a fraudulent scheme that targets individuals expecting package deliveries. By familiarising yourself with the common characteristics of scam text messages and phishing websites, you can better protect yourself from falling victim to this online fraud.
Following best practices for online security, reporting scams to relevant authorities, and sharing your experiences can also contribute to raising awareness and preventing others from becoming victims. Stay vigilant, stay informed, and prioritise your online safety to avoid falling victim to scams like the IPS delivery scam and other online frauds.
If a scam text has left you worried about your banking information, read our guide on whether it's safe to share your sort code and account number, and what to do if someone is using your name and address fraudulently.
Other scams to be aware of:
