Mail Theft Identity Fraud
Criminals steal physical mail from letterboxes or communal areas to harvest personal data — account statements, cards, and official letters — and commit identity fraud.
Last reviewed: 1 June 2026
What this scam is
Mail theft identity fraud occurs when a criminal steals physical post from a letterbox, communal mail room, or shared hallway with the specific intent of harvesting personal information. Unlike opportunistic theft, identity-focused mail theft is often targeted or systematic — thieves may revisit the same properties regularly or steal from apartment blocks where many residents share a single unlocked mail area.
The items most valuable to identity thieves arriving by post include bank and credit card statements (containing account numbers and sort codes), new bank cards, HMRC or tax authority correspondence, utility bills (used as proof of address for fraudulent applications), National Insurance or Social Security letters, prescription forms, and any mail containing full name and date of birth.
With a combination of these documents, a fraudster can open new credit accounts in the victim's name, redirect mail, apply for loans, or commit benefit fraud. Victims often do not discover the theft until unexpected credit applications appear on their credit file, debt collection letters arrive, or they are contacted about accounts they never opened.
Mail theft is a gateway crime: the physical data it provides enables a cascade of subsequent fraud that can take months or years to fully unwind. Prevention focuses on securing mail delivery, acting quickly when expected mail does not arrive, and monitoring credit files regularly.
How it works
Thieves targeting mail for identity fraud typically operate in one of several ways. The simplest is a letterbox raid — reaching into an unsecured letterbox, or opening an unlocked communal door in a block of flats, and removing any post that looks official or financial. Some use long hooks or tools to extract mail through letter slots without touching the door.
More systematic thieves monitor delivery times and return to properties immediately after the postal worker visits, or they tail mail vans to identify addresses where official mail is being delivered. In shared buildings, they may spend a few minutes in a communal hallway taking post from multiple letterboxes at once.
Once they have the mail, the thief identifies the most useful items: bank cards can be activated if the PIN arrives in a separate envelope that the thief also intercepts; statements provide account details used in vishing calls or fraudulent transactions; utility bills establish proof of address for new credit applications.
Some criminals combine mail theft with online data broker information or prior data breaches, assembling a full identity profile before applying for credit, opening bank accounts, or committing benefit fraud in the victim's name. The fraud is rarely discovered quickly because victims simply assume expected letters were delayed, not stolen.
Why this scam works
Mail theft identity fraud succeeds because physical post is inherently difficult to monitor. Most people do not maintain an inventory of correspondence they are expecting and do not immediately notice when a letter fails to arrive. There is no 'undelivered' notification for standard post the way there is for parcel tracking.
Shared mail facilities in apartment buildings or communal letterboxes at the end of driveways present low security and low surveillance risk for thieves. The time between a letter arriving and the resident collecting it can be hours or even days, giving a thief ample opportunity.
Financially, the return is high relative to the effort and risk. A single set of stolen bank statements plus a new card and PIN can yield immediate financial access, while other data enables longer-running identity fraud.
Common red flags
- Expected bank card, PIN letter, or official correspondence has not arrived
- Unfamiliar credit applications or accounts appearing on your credit report
- Debt collection letters arriving for debts you do not recognise
- Utility providers or banks contacting you about accounts you did not open
- Your existing financial statements suddenly stop arriving by post
- Communal letterboxes in your building have signs of forced entry or damage
- You receive a bank notification for a card activation you did not initiate
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Dear [Name], we are writing to confirm your new [Bank] account has been opened following your application on [date]. Your card is enclosed.
[Utility Company] confirms your new account at [address] is now active. Your first bill will arrive within [X] days.
HMRC has issued a tax rebate of [amount] to the account ending [number]. If you did not request this, contact us at [number].
Your new [Credit Card] card and PIN will arrive separately. Activate your card at [website] within [X] days of receipt.
[Debt Collector]: We are writing on behalf of [Lender] regarding an overdue balance of [amount] on an account opened on [date]. Contact us immediately.
Common variations
- Fraudulent postal redirection: fraudster submits a change-of-address form in the victim's name, redirecting all post to a different address
- Selective mail theft targeting only financial or official envelopes
- Mail stolen from holiday properties where residents are away for extended periods
- Post intercepted at shared student accommodation or care home letterboxes
How to verify before you act
If you are expecting important mail — a new bank card, a government letter, or a financial statement — and it has not arrived within the expected window, contact the sender directly to confirm whether it was dispatched. Do not assume it was a postal delay.
Sign up for credit monitoring alerts from a credit reference agency. Unexpected hard searches or new accounts on your credit file may indicate your identity has been used. Review your credit report at least once a year, or more frequently if you suspect your mail has been stolen.
If you live in a shared building, check whether the communal mail area is secure. Report broken or unsecured communal letterboxes to your landlord or building management.
Payment methods used
- Cryptocurrency
- Bank/wire transfer
- Gift cards
- Money transfer services
- Payment apps to 'friends & family'
Who is usually targeted
- Residents of apartment blocks with communal mail facilities
- People who collect mail infrequently
- Anyone expecting new bank cards or financial documents by post
- Older adults who may not notice missing post quickly
What to do immediately
- Contact your bank immediately if a card or sensitive financial letter has not arrived in the expected timeframe
- Check your credit report with a credit reference agency for any unfamiliar accounts or hard searches
- Ask your bank to reissue cards or documents via a more secure delivery method if available
- Report suspected mail theft to your national postal service and to your local police
- Notify HMRC or your relevant tax authority if you believe correspondence has been intercepted
- Consider a credit freeze or fraud alert on your credit file to prevent new accounts being opened
- Change passwords and security questions on financial accounts as a precaution
How to prevent it
- Fit a secure letterbox with a restricted opening that makes fishing tools ineffective
- Collect post promptly, particularly when expecting bank cards or sensitive documents
- Opt for online statements and electronic delivery for bank accounts, utility bills, and official correspondence where possible
- Ask senders to require a signature on delivery for high-value items like new bank cards
- Monitor your credit report regularly for accounts or searches you do not recognise
- Shred any financial documents before disposal — do not leave them in recycling bins
- Report communal letterbox security issues to your building manager immediately
Evidence to preserve
- Records of mail you were expecting but never received, including sender names and expected dates
- Any unfamiliar credit report entries, with dates of hard searches
- Debt collection letters or other correspondence you did not initiate
- Photos of any damaged or unsecured communal letterboxes
- Bank or lender confirmation of any accounts opened or applications made without your knowledge
- Any activation notifications for cards or accounts you did not request
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
How do I know if my mail has been stolen rather than just delayed?
If correspondence you were specifically expecting — such as a bank card, a PIN letter, or a government document — has not arrived within the standard delivery window, contact the sender directly. A genuine delay can be confirmed by the sender. If the sender confirms dispatch but you have not received it, treat it as potentially stolen and ask them to reissue it. Check your credit report for any sign of activity using your personal details.
Can a fraudster really open a bank account with just stolen mail?
Physical mail can provide two of the most common identity-check requirements — proof of identity and proof of address — in a single find. A bank statement and a utility bill together, for example, may be enough to pass the checks some services use. Combined with data from a previous breach that supplies a date of birth or National Insurance number, stolen post can give a fraudster enough to open accounts or apply for credit. Regularly monitoring your credit file is the best early-warning system.