Online Threat Alerts (OTA) - Alerting you to scams and frauds.

DHL Scam Emails - How to Protect Yourself
DHL Scam Emails - How to Protect Yourself

DHL scam emails are fraudulent phishing attempts designed by cybercriminals to steal your personal information, credit card details, or infect your device with malware. Cybercriminals frequently impersonate major logistics brands like DHL because delivery notifications naturally catch a recipient's immediate attention.

Common Phishing Tactics

  • Address Confirmation Required: The email claims delivery failed because the address is incomplete and urges you to click a button to "Confirm Delivery Address".
  • Outstanding Fee / Customs Charges: The message says a package is held at a warehouse and demands a small payment (e.g., €2.86 or a $3 customs fee) within 48 hours to release it.
  • Malicious Attachments: The text asks you to open an attached file (like a PDF or .zip file) to view your tracking number or receipt.

How to Spot a Fake DHL Email

  • Check the Sender Domain: Official communications only come from @dhl.com, @dpdhl.com, @dhl-news.com, or official country subdomains (like @dhl.de). DHL never uses public services like @gmail.com or @yahoo.com.
  • Look for Tracking Numbers: Genuine DHL payment or status requests will always include a valid Airwaybill (AWB) / tracking number. Do not trust emails missing this number.
  • Inspect the URL: Hover over any links without clicking them. Authentic links always point to a website starting with https://dhl.com or https://dpdhl.com.
  • Creates Artificial Urgency: Scammers use high-pressure language demanding immediate action to prevent you from thinking clearly.

What to Do If You Receive One

  1. Do Not Click Links: Never tap on buttons, click links, or download attachments.
  2. Verify Manually: Go directly to the official DHL Tracking Portal and type in your tracking number to verify the status.
  3. Report the Scam: Forward the email as an attachment to phishing-dpdhl@dhl.com so their security team can track and block the sender. Do not simply forward it as text, as technical routing data will be lost.
0

Comment sectionComments / Answers (0)

Remove sensitive information from your post. Your IP address will be used to display your estimated location.

Comment count 0


waiting