Heads up: DHL email scam

by Cinda Baxter on October 13, 2009

in internet, Real World

dhl_logoGiven the sheer volume of shipping retailers do, it’s not unusual to receive an email from a freight company regarding an errant package. The past few weeks, however, there’s been a scam email floating around, sent from what appears to be a legitimate DHL account (using their correct domain name after the @), but hold on…. Why does the language seem to flow a bit on the stilted, awkward side?

Because it’s fake. If you receive the following email (or similar), do NOT open the attachment:


We failed to deliver the package you have sent on the 16th of July in time
because the recipient’s address is incorrect.
Please print out the invoice copy attached and collect the package at our department.

According to DHL:

Please be advised that if you received an email suggesting that DHL is attempting to deliver a package and asking that you open the email attachment in order to affect delivery, the email is fraudulent, contains a virus, and the package does not exist. Please do not open the attachment. This is due to the Infostealer.Banker.C virus, which has been confirmed to be a real virus attached to a fraudulent email.

This virus is not coming from DHL – the authors of the malicious email virus are only using the DHL name in their message to grab user’s attention. We apologize for any inconvenience.

Normally, you can spot fakes like this by looking at the domain name on the sender’s email (then checking it online to see where it leads), but not always. In this case, a simple check of the DHL site popped up the virus warning on their home page. When in doubt, use your usual method of contact to check things out-—never rely on the links provided in a hinky sounding email since they’ll only point you where the sender wants you to go. Honest or otherwise.

Trust your gut, folks. After all, if it quacks like a duck….

Terry Irish October 13, 2009 at 9:44 am


We just received a UPS fake email just like the one you mentioned, so be aware.

Pat Miller November 2, 2010 at 7:26 pm

Here is one I received today with a ZIP file attached……it’s going into the trash bucket with out opening the zip. Note how professional this message seems….lol, Like not using my name, rather sending it to client with a lower case “c”lient. How about a package delivery via DHL but “arrived at the post office…lol, yet go to the nearest DHL office, yeah right———Beware !!!!

Dear client

Your parcel has arrived at the post office on October 15
Our Driver was unable to deliver the parcel to your address.
To receive a parcel you must go to the nearest DHL office and show your mailing label.
You need to print mailing label, and show it in DHL office to receive the parcel.

Thank you for your attention.
DHL Logistics Services.

Robert Fierros November 9, 2010 at 12:57 pm

SCAM DHL mailing label: I got the same DHL cover up with very poor writing skills at that. What gave it away automatically for me is that I first read it through my blackberry. In my blackberry I could see something that I could not see on my laptop. Below the fake message about the package is a long religious story about some “Raman” and the story is written in a very light yellow color. I’m sure they meant for that to be completely invisible, but it could clearly be seen in the smartphone email application. Several other middle-eastern names are also a part of the same story….WEIRD and WATCH OUT!

Becky November 10, 2010 at 1:22 pm

Here is how the one I received today was worded:

Your package has been returned to the DHL office.
The reason of the return is – Incorrect delivery address of the package

Attached to the letter mailing label contains the details of the package delivery.
You have to print mailing label, and come in the SDF office in order to receive the packages.

Thank you for attention.
DHL Customer.

(I particulary like the ending here…”Thank you for attention. DHL Customer.” – Great use of the English language!)

Dave November 14, 2010 at 2:51 am

I got this message on Nov 13th 2010: “Track your parcel S.NR78754″‏ followed by this text in the body….

This is a post notification

The company could not deliver your package to your address.
The package was returned to DHL office.
Information about your package is attached to the letter.
Look through the information about your package thoroughly.

Thank you for using our services.
DHL Customer.

A zip file was also attached but I didn’t open it. Googled “DHL SCAM” and it led me here. Besides deleting it, who should be notified?

Aurelien November 16, 2010 at 2:21 am

I got this message on Nov 16th 2010

“This is a post notification.

The company could not deliver your package to your address.
The package was returned to DHL office.
Information about your package is attached to the letter.
Look through the information about your package thoroughly.

Thank you.
DHL Customer Services.”

A zip file was also attached opened since ubuntu =)

Sorry for my english i’m french

Cinda Baxter November 16, 2010 at 10:01 am

Your English is perfect, Aurelien–definitely better than my French. (grin)

Leave a Comment

Previous post:

Next post: