Mail Rerouting Identity Theft
Fraudsters intercept or redirect physical mail containing sensitive identity documents — bank cards, NIN letters, passports, or HMRC correspondence — to gather everything needed to impersonate you and open accounts in your name.
Last reviewed: 1 June 2026
What this scam is
Mail rerouting identity theft involves the deliberate interception of physical post to harvest identity documents and financial instruments. While closely related to change-of-address redirect fraud, this category encompasses a broader range of tactics: stealing mail directly from unsecured letterboxes, intercepting deliveries from communal entrance areas in blocks of flats, obtaining copies of documents from unshredded recycling, or bribing postal workers.
The items most valued by identity thieves include: bank and credit card statements (account numbers, sort codes), replacement debit and credit cards, National Insurance number letters (still sent on paper in the UK), tax correspondence containing taxpayer identifiers, new chequebooks, NHS appointment letters (which confirm name, address, and date of birth), and benefit award letters.
Physical mail theft is a low-technology attack that requires no hacking skills. It is particularly effective in properties with communal or unsecured letterboxes — shared-access flats, student accommodation, and older properties with external-only letterboxes are all at elevated risk.
How it works
The most basic form involves visiting a target's address and removing mail from an unsecured letterbox, a communal mail rack in a block of flats, or from parcels left unattended at a doorstep. Fraudsters targeting a specific individual may monitor the address over several days to identify delivery patterns.
More sophisticated attacks involve submitting a postal redirect (see change-of-address redirect fraud) or presenting counterfeit ID at a post office to collect 'held for collection' items. Some fraudsters target sorting offices, delivery hubs, or mail on delivery vehicles — though these attacks require insider access or physical proximity.
Once the identity documents are collected, the fraudster uses them to open bank accounts, apply for credit, or sell the package on criminal markets. A full identity package — address, date of birth, bank account number, and a government-issued identifier — is sufficient to pass most in-person and online identity verification checks.
Why this scam works
Physical mail theft is low-risk for the attacker compared to digital attacks — CCTV coverage of residential areas is often poor, letterboxes are unlocked, and many valuable documents are sent by standard post rather than recorded delivery. The victim typically has no way of knowing mail was intercepted rather than simply delayed, which delays discovery significantly.
Common red flags
- Expected bank card, chequebook, or statement does not arrive
- NIN letter, tax notice, or government correspondence goes missing
- Neighbours or letting agents report mail being removed from communal areas
- Credit report shows new accounts around the time mail went missing
- Lender contacts you about a recently opened account you did not apply for
- Bank contacts you to activate a card you never received
- You find torn envelopes or opened mail near your letterbox
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
[Bank]: your replacement debit card for account ending [Number] has been sent. Please activate it via our app within [Days] of receipt.
Your National Insurance number is [NIN]. Please keep this in a safe place. If you did not request this letter, contact [Number].
[HMRC]: your Personal Tax Account activation code is [Code]. Use this to access your account at [URL] within 28 days.
[Lender]: your application for a [Loan Amount] personal loan using documents submitted at [Branch] has been approved.
New account notification: a current account has been opened in the name [Your Name] at our [Branch] branch on [Date].
Common variations
- Doorstep parcel interception for items requiring signature and containing sensitive documents
- Post-office-counter impersonation to collect 'held for collection' items
- Old address mail harvesting when a previous tenant's correspondence still arrives at a property
- Bin raiding for unshredded financial documents
- Letterbox fishing (using a hook through a letterbox slot to retrieve mail)
How to verify before you act
Contact your bank or issuing institution if a card or important document has not arrived within the expected delivery window. Ask them to confirm whether the item was despatched and to what address. If possible, opt for paperless statements and digital document delivery to reduce the volume of sensitive physical mail. For documents that must arrive by post — government letters, NIN cards — consider asking to collect in person at a local office.
Payment methods used
- Cryptocurrency
- Bank/wire transfer
- Gift cards
- Money transfer services
- Payment apps to 'friends & family'
Who is usually targeted
- Residents of properties with communal or unsecured letterboxes
- Students in shared accommodation
- Frequent travellers who leave mail unattended
- People who have recently moved and still receive mail at their old address
What to do immediately
- Report missing mail to your postal service and ask whether a redirect is active on your address
- Contact your bank to ask whether any cards were issued recently to your address that you did not receive
- Place a credit freeze at all credit bureaux to block any new accounts using intercepted documents
- File a police report — mail theft is a criminal offence
- Check your credit report for new accounts or enquiries you do not recognise
- Alert your landlord or building management if communal mail security is inadequate
- Contact any government agency whose correspondence you are missing and request reissue with verification
How to prevent it
- Install a lockable letterbox or secure mail slot to prevent unauthorised access
- Opt for paperless statements, e-delivery, and digital document services wherever possible
- Ask your bank to issue replacement cards by recorded or tracked delivery
- Shred all financial documents before disposal — never place them in recycling intact
- Collect mail promptly, especially if you live in a property with communal letter areas
- Register with your postal service for a digital mail preview service
- Notify your bank, insurer, and government agencies immediately when you change address so correspondence follows you
Evidence to preserve
- Records of which documents were sent but never received, with expected delivery dates
- Bank or government correspondence confirming items were despatched
- Police report copy and reference number
- Credit report showing any suspicious accounts opened around the time of the theft
- Photographs of your letterbox showing any evidence of tampering
- Witness statements from neighbours who observed mail being removed
- Building management reports if communal mail areas were compromised
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
What should I do if a bank card never arrived?
Contact your bank immediately to report the card as not received. Ask them to cancel it and reissue. Also ask whether the card was ever activated, which can help determine whether the fraud has progressed. Place a credit freeze as a precaution.
Is it worth reporting to police if only some letters are missing?
Yes. A police report establishes a record that can support any subsequent identity theft dispute with lenders. It also enables the police to investigate if the incident is part of a wider pattern of mail theft in your area.