DHL Incoming Package Notification Email Scam Explained

Over the last few years, scammers have increasingly relied on phishing emails posing as legitimate notifications from delivery companies like DHL, FedEx, and UPS. One common tactic is to send emails with subject lines like “Incoming Package Notification” or “Shipping Documents” pretending to be from DHL. These fraudulent emails aim to steal sensitive personal and financial information from unsuspecting recipients.

This article will provide an in-depth look at the DHL incoming package notification email scam – how it works, what to do if you receive one, and how to stay safe from this and other phishing attacks. With online shopping and deliveries surging in popularity, it’s important to understand these scams to avoid falling victim.

Overview of the DHL Incoming Package Notification Scam

The DHL incoming package notification scam is a phishing attack where scammers send fake emails pretending to be from the logistics company DHL. The emails claim that the recipient has an incoming package and provide a tracking number. They then direct the victim to a fake DHL website to fill in personal information or download malware.

This scam works because many people are expecting deliveries from DHL and other carriers. Seeing an unsolicited “shipping notification” email appears legitimate at first glance. However, telltale signs like poor spelling/grammar, odd links, and generic greetings like “Dear customer” indicate it’s a scam.

While this scam spoofs DHL specifically, variations target other delivery companies like FedEx and UPS. The PayPal shipping notification scam works similarly. Scammers register lookalike domains and create convincing fake notifications emails.

Objectives of the Scammers

The core objectives of the DHL package notification scam are:

• Phishing for personal information like names, addresses, phone numbers, etc. This can enable identity theft.
• Spreading malware by getting victims to download fake tracking apps or infected document attachments. This gives the scammers access to login credentials, financial information, and other sensitive data.
• Generating fraudulent wire transfers by tricking recipients into paying for non-existent shipping fees, customs charges, etc.

In summary, the scammers aim to steal identities, hijack accounts, drain bank balances, and access confidential information using the fake DHL emails and websites. Staying vigilant is crucial to avoid falling into these traps.

How the DHL Incoming Package Notification Scam Works

Now let’s examine the step-by-step process of how the DHL incoming package notification scam unfolds:

1. Scammers Send Fake Shipping Notification Emails

The scammers begin by sending out mass emails posing as DHL notifications. The subject line often says something like “DHL Delivery” or “DHL Shipping Information.”

The body copy is short and urges the recipient to take action right away. It mentions an incoming package, includes a fake tracking number, and provides a link to check shipping status.

Poor spelling/grammar, unusual links, and generic greetings like “Dear customer” indicate it’s an illegitimate email.

Here is one variant for this email scam:

Subject: Shipping Documents // Arrival Notice // Awb #xxxxxxxx

INCOMING PACKAGE NOTIFICATION

Dear customers,
This is to let you know you have an incoming message
registered package in your email xxxxxxx
Please follow our website below to track your shipment..
Thank you for using Delivery on Demand.
DHL Express – Perfection. Easy delivery

2. Recipients Open Email and Click Links

Many recipients will open the email, especially if they’re expecting a real DHL delivery. Seeing words like “incoming package” and what looks like a tracking number adds legitimacy.

They click on the link provided, which seems to go to the official DHL website but actually takes them to a fake phishing site. The URL may be misspelled or slightly different.

3. Fake DHL Site Asks for Personal Information

On the fake DHL tracking website, victims are prompted to enter details like their name, address, phone number, account passwords, etc. to view delivery status.

An official DHL site would never ask for this info to check a tracking number. But the phishing site claims it’s needed for verification or shipping purposes.

4. Scammers Collect and Use Personal Data

When victims enter their personal info, the scammers capture it. They use these details for identity theft, accessing accounts, or selling on the dark web.

In some cases, the fake site prompts a software download instead, infecting the victim’s device with malware. This allows the scammers to access everything on that device.

5. Fake Site Asks for Money

In addition to stealing personal information, some fake DHL notification emails claim additional money is owed for shipping fees, customs charges, etc.

Victims are instructed to wire the funds quickly or risk delays receiving their “package.” Scammers pocket the money, leaving victims out of pocket.

What to Do If You Get a Fake DHL Email

If you receive an unsolicited DHL notification email, especially with poor grammar/spelling, take these steps:

Look for Red Flags

Closely inspect the email sender, subject line, and content:

• Generic greetings like “Dear customer” instead of your name
• Suspicious links that don’t match DHL’s domain
• Odd spelling/grammar mistakes
• Requests for personal info or money
• Mentions of unexpected incoming packages

These are clear red flags of a scam.

Do Not Click Links or Attachments

Don’t click on any links, download attachments, or enter information on linked sites. They likely take you to phishing sites to steal your data or infect your device with malware.

Check the Sender’s Email Address

Even if the “From” name says DHL, check the sender’s actual email address. Scammers often spoof legitimate business names.

But on closer inspection, the address comes from non-DHL domains. This indicates a fake.

Search Sender/Subject Online

Copy and paste the sender’s email address and the subject line into a search engine. Append terms like “scam” or “fraud.” This can surface warnings if others have reported the same fake message.

Forward to DHL Fraud Email

Forward the phishing email to DHL at abuse@dhl.com. This alerts them to new scam variants using their brand. You can also report phishing emails to the FTC.

Contact Legit DHL If Unsure

If you’re expecting a package and receive a questionable email, contact DHL directly through their official site. Verify if they sent the message and whether you have a delivery incoming.

Never call numbers listed in suspicious emails—they direct to scammers posing as DHL.

Is Your Device Infected? Run a Free Malware Scan

Slow performance, constant pop-ups, or strange behavior? These are classic signs of a malware infection. A quick way to check is to scan your device with Malwarebytes Free, one of the most trusted malware removal tools available. If you only visited a scam page and didn’t download or install anything, this scan is optional.

The free version detects and removes the most common threats, including:

• Adware — the cause of those annoying pop-ups
• Browser hijackers — unwanted redirects and changed homepages
• Trojans and spyware — hidden programs stealing your data
• Potentially unwanted programs (PUPs) — software you never asked for

👉 Select your device below — Windows, Mac, or Android — then follow the simple steps to download Malwarebytes, scan your system, and remove any threats it finds. The scan usually takes 5 to 20 minutes.

Stay Protected: Block Ads and Malicious Sites

No scan can prove a device is completely clean, so it helps to block threats before they reach you. Most infections start with a malicious ad or a fake download button — so blocking them at the source is your best defense.

We recommend AdGuard, which blocks malicious ads, phishing pages, and dangerous redirects before they can reach you.

👉 Download AdGuard and browse safely

Protect Yourself from Future Scams

Here are some tips to avoid falling victim to similar phishing scams impersonating shipping companies:

• Never click links or call numbers in unexpected emails claiming to be from delivery firms. Always contact them directly using official channels to verify.
• Enable two-factor authentication where possible to protect accounts even if passwords are compromised.
• Carefully check email addresses, URLs, grammar, branding, and other details for red flags before interacting with messages.
• Be wary of emails asking you to pay additional shipping fees, customs duties, taxes, etc. Many scammers exploit this trend.
• Hover over links to preview their real destination before clicking. Check for misspellings or non-company URLs.
• Report suspicious emails to companies being spoofed and to anti-fraud agencies like the FTC. This helps curb scam prevalence.

Frequently Asked Questions about the DHL Incoming Package Notification Scam

1. What is the DHL incoming package notification scam?

The DHL incoming package notification scam is a phishing scam where recipients receive fraudulent emails claiming to be from DHL about an incoming package delivery. The emails include fake tracking numbers and direct victims to phishing sites to steal personal information or infect devices with malware.

2. How do I recognize a fake DHL email?

Fake DHL emails have several red flags to watch for:

• Generic greetings like “Dear Customer” instead of your name
• Odd links that don’t match DHL domain names
• Spelling/grammar mistakes
• Requests for personal info or bank details
• Mentions of incoming packages you don’t expect

3. What are the objectives of the DHL package scam?

The objectives are:

• Phishing for personal info to enable identity theft
• Spreading malware by getting victims to download infected files
• Generating fraudulent wire transfers by tricking people to pay fake fees

4. What happens if I click on links in the fake DHL emails?

The links take you to convincing but fake DHL websites to steal your personal information or infect your device with malware. Never click links in suspicious emails claiming to be from DHL.

5. Should I call the number listed in the fake DHL emails?

No, never call the number in emails you suspect are scams. The numbers connect you to scammers impersonating DHL. Only call official DHL numbers listed on their real website.

6. What should I do if I receive a suspicious DHL email?

• Check for red flags indicating a scam
• Verify the sender email address is from DHL
• Search online to see if others flagged the same email
• Forward it to DHL fraud/abuse email
• Report phishing emails to the FTC

7. How can I protect myself from the DHL package scam?

• Never open links or attachments in unexpected shipping emails
• Enable two-factor authentication on accounts
• Carefully inspect emails for phishing red flags
• Don’t pay any fees mentioned in suspicious emails
• Hover over links to check destinations before clicking
• Report phishing emails to help curb scams

8. What should I do if I already entered my information on a fake site?

If you entered any personal information, contact your bank, freeze your credit, change passwords, scan your device for malware, and monitor for signs of identity theft. Acting quickly can limit the damage.

The Bottom Line

The DHL incoming package notification phishing scam is widespread but avoidable if you know the red flags like poor spelling, odd links, generic greetings, and requests for personal information or money. Verify any suspicious delivery emails directly with customer service before acting.

Be cautious of all unsolicited messages claiming to be from shipping companies. Scammers exploit the surge in e-commerce deliveries. But vigilance and awareness of their tactics can keep you safe from fraud. Don’t provide information or open attachments/links in any suspicious emails.