They’re really making it difficult for us to spot scam links! Companies should get one domain and stick to it. How the hell are technologically vulnerable customers supposed to figure out that something like ryml.me is genuine but royalmailgb.app is fake (I’d have guessed, if I had to choose, that the second one was legit!).
Edit: Haha I just found this Tweet from Royal Mail warning about a scam that was doing the rounds, with a call to action to view more details at their super sketchy looking short URL