By The ACS team · Published
Scam texts are doing the rounds in Norfolk again: a parcel that "couldn't be delivered", a parking fine (PCN) that's "overdue", a tax refund from "HMRC". They look convincing, they arrive on personal and work phones alike, and they all want the same thing: your card details or your passwords. Here's what's circulating, how to spot a scam text, and how to report it in a few seconds.
The short answer
- Don't tap the link. That's the whole trick. Every one of these texts leads to a convincing fake website.
- Forward it to 7726. It's free, and your network uses the reports to block the sender.
- Check another way. Open the courier's app, your council's own website or your HMRC account by typing the address yourself.
- Councils, Parkingeye and RingGo don't send parking fines by text. HMRC doesn't send tax refunds by text either.
- If you've already entered card details, call your bank now on the number on the back of your card.
Scam texts reported in Norfolk this year
These are recent warnings from Norfolk Trading Standards. The brand named is the one the scammers pretend to be. The real companies have nothing to do with the messages.
| Date of warning | Pretends to be | What the message says |
|---|---|---|
| 2 October 2026 | A "Road Safety Notice" | An automated camera caught you speeding; log in to respond |
| 30 September 2026 | A bank | A large direct debit has been set up; call this number to cancel it |
| 25 September 2026 | DVLA | Your vehicle tax payment failed; update your details or be fined |
| 28 August 2026 | A council parking fine (PCN) | An unpaid fine, with threats of extra charges, seizure or credit damage |
| 26 August 2026 | A mobile network | Your SIM card is about to expire; log in and accept new terms |
| 19 August 2026 | DPD and other couriers | We tried to deliver your parcel but no one was in |
| 13 August 2026 | Parkingeye | A parking charge is outstanding; pay online to avoid more charges |
| 13 July 2026 | RingGo | An outstanding parking payment or unpaid parking session |
Warnings from Norfolk Trading Standards, July to October 2026.
Parcel scam texts: DPD, Evri and Royal Mail
The classic parcel text says a courier tried to deliver, no one was in, and you need to rebook or pay a small "redelivery fee". Norfolk Trading Standards has warned about messages pretending to be DPD and Evri this year, and they turn up all the time because most of us are expecting a parcel.
How to tell:
- The link isn't the courier's real website. It's usually a long or odd address, sometimes with the courier's name buried in it.
- It asks for a fee. Couriers don't text you asking for a card payment to redeliver.
- It's vague. No shop name, no item, just a reference number.
What to do: ignore the link, and track the parcel using the reference from the shop you ordered from, in the courier's own app or website.
Parking fine (PCN) scam texts
Fake parking fine texts have been one of the busiest scams of 2026. They claim to be a Penalty Charge Notice (PCN), or a charge from a car park operator such as Parkingeye or RingGo, and they threaten "additional fines", "vehicle seizure" or damage to your credit history if you don't pay now.
The easy test: a genuine PCN never arrives by text. Norfolk Trading Standards says genuine PCNs are either a ticket on the windscreen or a letter to the vehicle's registered keeper. Parkingeye says it doesn't send charge notices, payment requests or reminders by text or email. If you're worried, check with the council or car park operator using contact details you find yourself.
HMRC scam texts
HMRC texts usually promise a tax refund, or warn of a penalty, and send you to a fake government website. They're especially common around the Self Assessment deadline on 31 January, when people expect to hear from HMRC.
HMRC is clear: it never tells you about a tax refund, or asks for personal or payment information, by text. Forward HMRC texts to 60599 (charged at your network rate), as well as or instead of 7726.
How to spot a scam text
Whatever brand it borrows, a scam text nearly always has some of these:
- Urgency. "Today", "within 24 hours", "final notice".
- A threat or a reward. A fine, a seized car, a cancelled account, or money owed to you.
- A link or a number to call. The real company would let you go to it yourself.
- A small payment. A tiny "redelivery fee" is really a way to collect your full card details.
- Something that doesn't fit. A parcel you didn't order, a car park you didn't use, a dollar sign on a UK bank text.
If in doubt, don't reply, even with "STOP". It tells the sender the number is live.
How to report a scam text to 7726
Forwarding a scam text is free and takes seconds:
- Copy or note the sender's number first.
- Forward the message to 7726. On an iPhone, press and hold the message, tap More, then the forward arrow. On Android, press and hold the message, then choose Forward.
- Your network will reply asking for the sender's number. Send it.
- Delete the message.
The NCSC also takes scam emails at report@phishing.gov.uk. For HMRC texts, use 60599. If you've lost money, report it to Report Fraud (the service that replaced Action Fraud) on 0300 123 2040.
Scam texts and your business
These texts don't only hit personal phones. A member of staff who enters their work email password on a fake "parcel" or "council" page can hand a criminal the keys to your Microsoft 365. Two simple things cut the risk a lot: two-step sign-in (MFA) on every work account, and a quick word with the team about what these messages look like. Stolen passwords are also a common way into a business for ransomware: see what the latest UK ransomware figures mean for small firms.
How we can help
We set up MFA, email filtering and managed antivirus for businesses across Norfolk, and we're happy to give your team a short, plain-English briefing on spotting scams. If someone has clicked a link on a work device, call us and we'll check what happened and lock things down. See our cyber security service, get in touch, or call 01362 760100.