A DPD-branded message can be genuine or copied by a scammer. The safest approach is to verify the parcel outside the message before you click or pay.
Use the steps below to slow the situation down, verify the claim through a separate route and protect yourself without giving the suspicious contact more information.
Start with the parcel, not the message
Ask whether you are genuinely expecting a parcel that could be carried by DPD. Check the order confirmation or retailer account you already trust. A scammer can guess that many people are waiting for deliveries, so an expected parcel is not proof by itself.
Do not let branding decide for you
Logos, sender names, tracking-style numbers and professional layouts can be copied. The NCSC warns that modern scam messages can look convincing, so spelling and design should not be your only test.
Inspect the request
Be cautious if the message asks for an unexpected fee, bank details, passwords, one-time codes, personal information or urgent action. Do not provide information simply because the message says delivery will fail without it.
Verify independently
Leave the message and navigate to DPD through its official website or app yourself. Use tracking details from the retailer or an existing order record where possible. Do not use the suspicious message’s link or contact number to verify itself.
If the message was fraudulent
Forward suspicious texts to 7726. Suspicious websites can be reported to the NCSC. If you entered payment information, contact your bank using a trusted route; if money was lost or an account was compromised, report the fraud through the appropriate UK route.
Practical checklist
Quick checklist
- Check the original retailer order
- Do not trust branding alone
- Treat unexpected payment requests cautiously
- Navigate to DPD independently
- Forward suspicious texts to 7726
- Contact your bank if payment details were exposed
Official UK guidance
Scam techniques and reporting routes change. These official sources were checked when this guide was updated: