ukflag (44) (0) 207 355 3555  
usflag (1) 941 925 9730  
 
 
 
 
 
 
 
 
 
 
 
     
     
     
Postroom Security

Would you open this package?
Does it look suspicious?

Roll mouse over image to reveal package contents

Letterbomb Recognition and Key Indicators

Letterbombs and explosive packages are widely used as a convenient form of attacking an organisation or indivual anonymously.

These Improvised Explosive Devices (IEDs) can come in a variety of shapes and sizes. Although they may be large, they do not need to be bulky and can be in delivered packages or parcels. Packages the size of paper-back books have been among the more successful. In the case of courier delivered items, devices weighting in excess of 4g have been used.


Although there is no such thing as a typical letterbomb, they have certain common characteristics which will help you recognise them.

Many of these indicators are quite general. One alone will not necessarily constitute a cause for concern. Their individual relevance will vary with context, e.g. from organisation to organisation, and in light of the current threat and Response Level. Any suspicions should be considered in combination with a good risk assessment.

General Indicators 

Pointers to look for in determining whether a package or letter is suspect include:

(a) Point of Origin
e.g. from postmark or name of sender, if given. If from an unusual point of origin or sender.

(b) Type of Envelope
If in a 'Jiffy' bag or similar type of padded envelope

(c) Method of Addressing
Dry transfer instant lettering e.g. 'Letraset', or Uno Stencil has been used to print the address and especially if this has been applied unevenly

(d) Manuscript of Sender
If this indicates, for example, a foreign style of writing and if such is not usually received:

(e) Balance
If the package or letter is lop-sided.

(f) Weight
If there seems to be excessive weight for size

(g) Protruding Wires
Even well prepared devices can come adrift in transit

(h) A Small Hole
Like a pin hole, in the package wrapping or the envelope

(i) Grease-marks
On the Package or the Envelope (possibly caused by the incendiary composition or explosive)

(j) A Smell
Like That of Almonds or Marzipan

(k) Contents
If the appearance suggests a book (unless its receipt is totally expected)

DO NOT PRESS OR FLEX THE PACKAGE.

(l) Flap of Envelope
Usually there is an un-gummed gap of about 3 - 5 mm - if the flap of the envelope is stuck down completely

Additionally, in Case of Letter:

(a) The feel (but DO NOT PRESS OR FLEX) will indicate whether there is only folded paper inside the envelope (indicating that the contents are not dangerous), but if there is either stiffening by, for example, card or the feel of metal: treat as suspect

(b) A letter usually weighs up to about 28g. An effective letter device weighs between 50 and 100g; it therefore needs more than the usual value of postage stamps for its size; and it is usually thick for a letter, being at least 5mm. On receipt of a letter with these indications: treat as suspect.

(c) If, on opening an envelope, there is an additional inner envelope, and

(i) it is tightly taped or tied with string

or

(ii) it is personally addressed; the letter should be scrutinised again for signs or any of the pointers in this and the foregoing paragraph: treat as suspect.

These indicators can be summarised as the 7 s's

Size: Is the letter big enough to house a device without being obvious e.g. Jiffy-bags, videotapes etc?

Shape: Is the shape irregular e.g. lumps denoting possibility of batteries or switching gear? Do not bend though.

Sender: Do you recognise who sent if from the postmark, label or typeface. Do they match? Can you check with the recipient?

Stamp: Are there no stamps or is it over-stamped? Is the postmark blurred? Smudged or missing altogether?

Seal: Has the letter been sealed more securely denoting it is containing something that must not fall out use of tape, staples etc?

Stain: Is there an oily stain showing through the envelope or oily fingermarks on the outside? Some explosives weep/sweat small amounts of liquid that will produce stains.

Smell: Explosives can smell, the smell of almonds or marzipan is suspicious. Equally an overpowering smell of (for example) perfume could be used to try and disguise this.

Additional explosive or incendiary indicators:

  • unusually heavy or uneven weight distribution
  • small hole(s) in envelope or wrapping.


It is not necessary to open an envelope or package in any particular way to initiate an IED. It may be triggered by an attempt, however slight, to open the outer cover.

Additional CBR indicators:

  • powders, liquids or odours emanating from package
  • wrapping stained by liquid leakage
  • unexpected items or materials found in package on opening or x-raying (loose or in a container): powdered, crystalline or granular solids; liquids; sticky substances or residues
  • unexpected odours observed on opening
  • sudden onset of illness or irritation of skin, eyes or nose.

    information on how you can detect "white powders" contained in the mail
    scanmax x-ray postal scanners

Introduction to Letterbombs

  • The world's first mailbomb was used by a Swedish man named Martin Ekenberg on August 20 , 1904 , targeting CEO Karl Fredrik Lundin in Stockholm . It was made of a box loaded with bullets and explosives.
  • Theodore Kaczynski , the "Unabomber", killed three and injured 23 in a series of mailbombings in the United States from the late 1970s to the early 1990s .
  • Franz Fuchs , Austrian mailbomber, killed four and injured 15 with mailbombs and improvised explosive devices in the mid-1990s.
  • In February 2007 , a series of mailbombings in the United Kingdom injured nine people, though none of them were critically hurt.
  • In January and February 2007, a bomber calling himself " The Bishop " sent several unassembled bombs to financial firms in the United States, and is believed to be planning further attacks.
  • in August 2007 a Lebanon immigrant Was Charged From A Letter bomb Ring in the Toronto-Guelph, ON Area, he was responsible for injuring 1 Person, He Was Also Responsible for The Closing of a portion of the Don Valley Parkway in Toronto as a Precaution on August 31, 2007.