For more than a decade, inboxes around the world have been hit by bogus emails claiming to be from international delivery service DHL.
Typically, the emails claim that there has been a problem such as an incorrect shipping address that has delayed delivery of a package being sent to you.
The emails urge you to click a link or open an attached file to deal with the supposed delivery issue.
However, the emails have no connection to DHL and the claims about a lost or delayed package are untrue.
Here’s a screenshot of a rather crude version that recently hit my spam folder:
Clicking links in these scam emails opens fraudulent websites that supposedly allows you to download a shipping form or other delivery related document. However, if you proceed, you will actually be downloading malware. In some cases, the “delivery documents” are contained in an attached file. But, as with clicking the links, opening the attachments can also install malware.
Once installed, the malware may steal personal information such as banking passwords from your computer and send it to online criminals. Or, it might lock up all of your files and then demand that you pay a ransom to receive a decryption key.
Some versions of the fake websites may try to trick you into supplying sensitive personal and financial information, ostensibly as a means of proving your identity and procuring your package. This information may later be used to commit fraud and identity theft.
Criminals have repeatedly used the DHL name and logo in such scam attempts over a number of years.
If you receive such an email, do not click any links or open any attachments that it contains.
Transcript of the scam email:
Office] DHL Shipment Notification
I’m sorry for the trouble in receiving your order, and will be happy to help straighten it out.
The shipping information on your order is incorrect,
(insert information here)
We are so sorry for the delay; your email has only just now come to our attention. We have contacted the current resident of that address, and asked them to place the package out for return to sender, but have not received word as to whether or not this has occurred.
Thanks for your patience!