People should watch out for an "extremely convincing" scam which may redirect potential victims to the official Post Office website, Which? has warned.
The consumer group said it has seen variations of texts claiming a parcel delivery has failed and asking recipients to click a link to book or reschedule a delivery. However, clicking on these links may take people to convincing cloned online sites where they are asked to fill in their personal details, putting them at risk of identity fraud.
They may then be asked to pay a charge for re-delivery and then told their request has been "processed successfully", making the scam appear even more convincing.
The Post Office does not send out texts about parcels or mail and it said it takes immediate action to have fake web pages taken down.
Adam French, Which? consumer rights editor, said: "If people input their details and pay for a new delivery date, the scammers redirect them to the official Post Office website - making this fake even more plausible.
"Consumers should be on high alert for scams and, if in any doubt, should verify the text directly with the company before giving any personal information.
"If you've entered any bank details, contact your bank immediately to ensure the scammer cannot take any more money from your account and ask to be reimbursed.”
A Post Office spokesperson said: "People are being tricked by fake texts claiming to be from the Post Office, but the Post Office will never send texts about parcels or mail.
"This is because the Post Office does not deliver parcels or letters. We're grateful to Which? for alerting us to this fake website which we were already aware of and had taken action to get it blocked.”
This week, the Post office has launched a social media campaign aimed at those aged 50-plus to warn them of scams that may use the Post Office name and what to do if they have any suspicions.
People can report scam texts by forwarding them to the network provider on 7726 and it is worth alerting the genuine companies that scammers are imitating, Which? said.
The Post Office spokesperson added: "Post Office use digital monitoring systems that alert us to any website set up with our name in the URL.
"Once we are alerted, usually within hours to 24 hours of a URL being registered, we monitor the URL for any web page that is set up, specifically using our brand.
"We are only able to take action once a website is set up and displays our branding and trademark.”
"We take enforcement action and apply to the domain (URL) registrar for unauthorised use of our brand, and once the registrar accepts our claim they will disconnect the URL from the website's hosting service, rendering the site 'offline'."
Get the latest money-saving and benefits news sent straight to your inbox. Sign up to our weekly Money newsletter here.
