UK phishing scams soar 140%: Royal Mail, Paypal, HMRC among top 10 most impersonated brands by cybercriminals
Phishing attempts in the UK have surged by 140% in 2025, with the average UK adult receiving two scam calls every week. Concerningly, almost one in three (28%) Brits admit they are not confident in spotting whether a call from their bank is genuine.
From fake parcel delivery updates to bank account security alerts, scammers are becoming increasingly sophisticated at impersonating trusted household names – all in an attempt to steal personal details and hard-earned cash. But which brand names are scammers impersonating the most?
To find out, online broker experts BrokerChooser analysed UK search volume data for phishing-related queries to uncover the brands most impersonated by scammers looking to trick unsuspecting Brits. To help consumers spot these sneaky scams, Adam Nasli, head broker analyst at BrokerChooser, shared four tips to stay protected from phishing attacks.
Don’t get hooked: The top 15 brands scammers spoof the most
Rank | Company | Average monthly search volumes for “[brand] scam text” “[brand] scam email” “[brand] scam refund” (UK) | Annual monthly search volumes for “[brand] scam text” “[brand] scam email” “[brand] scam refund” (UK) |
1 | Royal Mail | 6,650 | 79,800 |
2 | PayPal | 3,960 | 47,520 |
3 | Evri | 3,000 | 36,000 |
4 | HMRC | 1,890 | 22,680 |
5 | DPD | 1,850 | 22,200 |
6 | DVLA | 1,600 | 19,200 |
7 | Amazon | 1,520 | 18,240 |
8 | Apple | 1,150 | 13,800 |
9 | Booking.com | 1,110 | 13,320 |
10 | O2 | 1,020 | 12,240 |
11 | Microsoft | 1,000 | 12,000 |
12 | Barclays | 920 | 11,040 |
13 | British Gas | 920 | 11,040 |
14= | 790 | 9,480 | |
14= | eBay | 790 | 9,480 |
For the complete data, please click here.
Parcel delivery names dominate the list of most impersonated brands
Royal Mail tops the list as the brand most commonly spoofed by phishing scammers, with approximately 6,650 monthly UK searches linked to scam attempts, including searches such as “Royal Mail scam text” and “Royal Mail email scam”. This adds up to an estimated 79,800 searches a year – almost double PayPal in second (47,520 annual searches) and more than three times HMRC (22,680 annual searches). Evidently, the nation’s postal service has become a prime target for fraudsters, who prey on the anticipation of those waiting on a delivery. A common tactic is to send fake messages claiming a small fee – usually between £1 and £3 – is needed for redelivery or customs clearance. These messages often contain links to fake websites designed to steal personal and payment details. Remember that legitimate courier companies will never ask for payments through text or email links.
PayPal comes second as one of scammers’ favourite brands to spoof, generating 3,960 average monthly searches in the UK related to phishing scams, totalling 47,520 searches annually. Fraudsters often impersonate the service by sending fake security alerts or account restriction notices, using panic and urgency to pressure victims into clicking malicious links. Common tactics include messages claiming “this link will expire in 24 hours” or warning that an unauthorised payment has been charged to the user’s account and must be disputed immediately.
Evri ranks third among the brands most impersonated by phishing scammers, with 3,000 UK monthly searches and 36,000 annually. With millions of parcels delivered across the UK, the courier has become an easy target for fraudsters looking to catch shoppers off guard.
With 1,890 average monthly searches in the UK – a staggering 22,680 in a year – HMRC ranks fourth on the list of brands most commonly spoofed by scammers. Fraudsters frequently impersonate the tax authority with fake messages about tax refunds, unpaid bills or urgent account issues. Brits should avoid clicking links in unexpected texts or emails, and instead log into their HMRC accounts directly through the official GOV.UK website rather than using links provided in unsolicited texts or emails.
DPD rounds out the top five most spoofed brands in the UK, with 1,850 monthly searches related to phishing scams and 22,200 searches annually. Together, parcel delivery services have accumulated more than 11,000 UK searches per month related to scams, as fraudsters target the huge pool of potential victims created by the rise of online shopping.
Adam shared four signs to help consumers spot phishing scams and avoid falling victim:
“Phishing works by impersonating organisations you regularly exchange money with – a courier, your bank, or the tax authority – so your guard drops before you have even read the message properly. That is what makes it convincing: the organisation is real, but the message is not.
In most cases, it is best not to act on such messages. Leave the text or email untouched and contact the organisation directly through its official app, a website address you type in yourself, or the phone number on the back of your card. Then verify whether the request is genuine. On top of this, treat urgency as a warning sign. A legitimate organisation will not lose your parcel or freeze your account simply because you took ten minutes to check.”
Think twice about unsolicited messages
With AI, scammers have all become experts at copying logos, mimicking writing styles and recreating the tone of trusted companies. Consumers should stay alert when receiving unexpected texts, emails or messages claiming to be from their bank, delivery company or a government service. Avoid clicking any links straight away. Instead, visit the company’s official website or app directly to check whether the message is genuine.
Check the sender details and website address carefully
Look closely at the sender’s email address, unusual wording, spelling mistakes and website URLs before taking any action. Scam site addresses often look like the real ones, only with tiny changes – such as adding an extra letter or using similar-looking domains – to trick users into believing they are on an official site.
Never share passwords or payment details through links
Legitimate organisations will not ask you to reveal sensitive information such as passwords, one-time security codes or full banking details through unexpected links in a text or email. If you are unsure, contact the company directly using a verified phone number rather than replying directly, as this could put you back in contact with the scammer.
Say no to pressure to act immediately
Phishing scams often create panic to stop people from thinking clearly. Fraudsters like to use false urgency, claiming your account will be locked, your parcel will be returned or you owe an immediate payment, all to cloud your judgement. Take a moment to verify the request before sharing any information or making a payment to avoid falling into their trap.