From Phantom Parcels to Charity Ghosts: Your Fridge-Door Wall Chart for the 2026 Festive Scam Season

Every year around this time, our fridge becomes a small corkboard of national importance: the bin collection schedule, a takeaway menu that has seen better days, and a sheet of Christmas film times held up by a magnet shaped like a robin.

This year, add one more page. Fraud doesn't take a holiday — it takes a calendar. The festive stretch is the busiest period of the year for scams in the UK, and it runs to a predictable rhythm: parcel texts in late November, marketplace trickery on Black Friday, sob stories through December, then a fresh wave of phishing the moment the sales begin. Print this, stick it at eye level, and read it out loud at Sunday dinner. It is written for households, not security teams.

Why the festive calendar is a fraud calendar

Scammers fish where the fish are. Between late November and the end of January, the average UK home is expecting parcels, buying gifts online, donating to causes, chasing bargains and renewing subscriptions — frequently all in the same week, usually on a phone, almost always in a rush. Expectation, novelty and time pressure are the three ingredients every con artist dreams of.

Reports to Action Fraud and to high street banks reliably climb through this window, and the distress tends to peak in the new year when the card statements arrive. The reassuring part is how repetitive it all is. Learn the rhythm and most of it can be dodged with a second glance.

Late November: the parcel text deluge

This is the opening act, and it is relentless. A text arrives saying a courier tried to deliver and needs a small redelivery fee — usually somewhere between 50p and £2.50, which is deliberately low enough that nobody stops to think. The link leads to a convincing copy of a Royal Mail, Evri, DPD, Yodel or Amazon page, which then asks for your full card details, your address and sometimes your date of birth.

Here's the tell that settles it: Royal Mail does not text you a link asking for a redelivery fee, and Evri will not charge you a penny by text message. If a notification ever worries you, close the message, type the courier's address into your browser yourself and track the parcel there. Never tap the link, even to 'check'.

Also be wary of texts claiming a parcel is 'held at the depot' and asking you to reschedule via a link, and of missed-delivery cards with QR codes. Genuine cards carry a real tracking number you can type in manually.

Black Friday week: the bargain that isn't

Facebook Marketplace, Vinted, Depop, Gumtree and Instagram ads are all fertile ground. The pattern is familiar: a price that is just slightly too good, a seller who is friendly but keen to move the conversation to WhatsApp, and a request to pay by bank transfer because 'the platform holds my money for too long'.

Once you pay by bank transfer, the money is gone and the platform's buyer protection — which only applies if you pay through it — is worthless. Fake shops also spring up on lookalike .co.uk domains with cloned logos and no history. Before buying from an unfamiliar site, check the domain age, hunt for reviews on a completely different site, do a reverse image search on the product photo, and look the company up on Companies House. If any of that draws a blank, walk away.

December: the charity ghosts

The giving season brings out the appeals, and some of them are not real. Expect fake JustGiving-style pages shared in local Facebook groups, fake disaster appeals with emotive photos lifted from news agencies, doorstep collectors with no ID, and emails promising Gift Aid paperwork that harvest your details instead.

Before donating, look the charity up on the Charity Commission register for England and Wales, OSCR in Scotland or CCNI in Northern Ireland. Search for the charity's own website and donate through that, rather than through a link someone sent you. Genuine charities do not mind you checking.

Mid-December: the second wave

Once parcels are genuinely in transit, the fake 'we have your parcel' texts are joined by fake HMRC tax rebates, fake TV Licence renewal demands, fake Ofcom broadband switch-off warnings and, inevitably, the bank 'safe account' call. That last one deserves a rule in permanent marker: no bank, police force or fraud team will ever ask you to move money to a safe account. Hang up and ring the number on the back of your card.

Teenagers are a target too, with fake Christmas job adverts on social media asking for an upfront 'uniform deposit' or 'DBS fee'.

Christmas week and Boxing Day

Digital gift cards, e-cards with links, tickets for pantomimes and matches, and 'Christmas raffles' for causes nobody can name — this week is full of small, quiet losses. Boxing Day brings the sales phishing before the turkey sandwiches are finished. Fake retailer emails, 'you have won' pop-ups and cloned checkout pages all spike as genuine shops discount.

January: the sales and the subscriptions

The January sales are phishing season proper. Watch for cloned sale emails from familiar retailers, 'your order could not be processed' messages, and the subscription trick: a fake Amazon Prime or Netflix email saying your payment failed, with a phone number. Call it and you will be talked into installing remote access software such as AnyDesk or TeamViewer, at which point your online banking is effectively theirs.

The fridge checklist

Keep it short enough to actually read:

• No bank, no police, no tax office will ever ask you to move money to a 'safe account'.
• No courier charges a redelivery fee by text link. Type the address yourself.
• No legitimate buyer asks you to pay by bank transfer outside the platform.
• If it is urgent, it is usually a scam. Urgency is the tool, not the message.
• Check charities on the Charity Commission. Check companies on Companies House.
• Forward suspicious emails to [email protected]. Forward scam texts to 7726.
• Report fraud and cybercrime to Action Fraud on 0300 123 2040 or via actionfraud.police.uk.
• Take Five: stop, challenge, protect.

If someone has already clicked

This is the section to read twice, because in a multi-generational house the clicker is often a grandparent or a teenager who is mortified and hiding it.

1. Do not delete anything. Screenshot the message, the page and any receipt before it vanishes.
2. If they gave remote access, unplug the device from Wi-Fi immediately, uninstall the remote software and then change passwords from a different, clean device.
3. Ring the bank on the number printed on the card. Cancel the card, dispute the payment. If a bank transfer has gone, call within hours, not days — the reimbursement rules that now cover most UK bank transfers depend heavily on how quickly you report.
4. Report to Action Fraud, forward the email, text the number to 7726.
5. Tell the whole household. The same scam is almost certainly running a few doors down.
6. Watch for follow-ups. Details get sold on, and the second attempt is usually more convincing.
7. Do a free statutory check with a credit reference agency if identity details were shared.

The family rule that beats all of this

Agree a household password — a silly word, not a pet's name — that anyone can use to verify a caller claiming to be family. Nominate one person as the digital first responder, so nobody has to guess at 9pm on a Sunday. And put this page where the bin calendar lives. Fridges have protected British families from worse things than fraud.