Change-of-Address Fraud

Change-of-address fraud (also called address diversion fraud or mail diversion fraud) occurs when a fraudster submits a change-of-address request to a postal service, bank, or government agency on behalf of a victim — redirecting the victim's mail to an address the fraudster controls. Once mail is being diverted, the fraudster can intercept new bank cards and PINs, financial statements, tax correspondence, healthcare documents, and any other time-sensitive communications.

In the UK, Royal Mail's redirection service has been exploited for this purpose, as has the US Postal Service's National Change of Address system. Banks and government agencies can also be targeted directly, with fraudsters using social engineering, stolen credentials, or forged documents to update contact addresses on file.

Victims often discover the fraud only when they notice expected mail has stopped arriving — monthly statements, card renewals, or tax documents that never appear. Signs of a change-of-address fraud include unexplained cessation of regular post, notifications of address changes they did not initiate, or unfamiliar transactions appearing on accounts. Protective measures include opting for electronic communications, monitoring accounts closely, and setting up postal-redirection alerts.