“DHL – A Parcel Collection Has Been Registered” Phishing Scam

Cybercriminals are always looking for new ways to trick unsuspecting victims into revealing their sensitive information. One of the latest phishing scams involves a fraudulent email titled “DHL – A Parcel Collection Has Been Registered.” This deceptive email masquerades as a legitimate notification from DHL eCommerce, falsely informing recipients that a parcel collection has been scheduled.

If you receive this email, do not click on any links or provide any personal details. Read on to understand how this scam operates, the risks involved, and how to protect yourself.

---

Understanding the “DHL – A Parcel Collection Has Been Registered” Scam Email

The “DHL – A Parcel Collection Has Been Registered” phishing email attempts to deceive recipients by claiming that a parcel collection order has been registered in the DHL24 application. It provides a specific order number (e.g., 8040690125WWW) and a collection date (January 31, 2025) along with a time window. The email includes a hyperlink labeled “eFaktura DHL eCommerce”, which supposedly allows the recipient to check their active orders. However, this link leads to a phishing website designed to steal login credentials.

The goal of the scammers is to trick users into entering their DHL account details, which they can then exploit for unauthorized transactions, identity theft, or even selling the stolen credentials on the dark web.

Text of the Phishing Email

Below is the exact text used in the scam email:

---

Subject: Courier order confirmation 8040690125WWW

Dear Customer,

A parcel collection order no. 8040690125WWW has been registered in the DHL24 application. On 31-01-2025 between 12:00 and 17:00, a DHL eCommerce courier will arrive to collect the parcel.

Active orders can be viewed at:
eFaktura DHL eCommerce.

The registered order will be verified and forwarded for execution. In case of any problems or doubts, we will contact you at the telephone number or e-mail address provided.

We wish you a pleasant use of the DHL24 application,
DHL eCommerce

NOTE: This message was generated automatically. Please do not reply using the Reply/Reply function.

---

Threat Summary

Attribute	Details
Name	DHL – A Parcel Collection Has Been Registered Scam
Threat Type	Phishing, Social Engineering, Fraud
Fake Claim	A parcel collection order has been scheduled via DHL eCommerce
Disguise	A fake notification from DHL
Symptoms	Generic greeting, urgent language, suspicious links, grammatical errors
Distribution Methods	Deceptive emails, phishing websites, online ads, search engine poisoning, misspelled domains
Damage	Identity theft, financial fraud, unauthorized access to personal accounts, stolen credentials sold on the dark web
Detection Names	Phishing.DHLScam, Email Fraud, DHL Fake Notification Scam
Danger Level	High

---

How This Scam Works

1. The Fake Email – The victim receives an email that appears to be from DHL, notifying them about a parcel collection.
2. The Phishing Link – The email includes a hyperlink that directs users to a fake DHL login page.
3. Credential Theft – If the victim enters their DHL login details, the scammers capture them.
4. Exploitation – The attackers may:
   • Use the stolen login details to access other accounts (if the same password is used elsewhere).
   • Conduct fraudulent transactions.
   • Sell the credentials on the dark web.
   • Launch further phishing attacks using the victim’s email.

---

How to Remove the “DHL – A Parcel Collection Has Been Registered” Scam Email

If you have already clicked on the link and entered your details, follow these steps immediately:

Step 1: Change Your Passwords

• If you entered your DHL login credentials, reset your DHL account password immediately.
• If you used the same password elsewhere, change those passwords too.

Step 2: Scan Your System for Malware

Cybercriminals often include malware or keyloggers in phishing campaigns. Use SpyHunter to scan and remove any potential threats:

1. Download SpyHunter.
2. Install and run the program.
3. Perform a full system scan to detect malicious software.
4. Remove any threats detected by SpyHunter.

Step 3: Check for Unauthorized Activity

• Monitor your DHL account for suspicious transactions.
• Check your email for unauthorized password reset requests.
• Look at your bank and credit card statements for unexpected charges.

Step 4: Report the Scam

• Forward the phishing email to phishing@dhl.com.
• Report it to your email provider (e.g., Gmail, Outlook).
• If you lost money, report it to your local authorities.

---

How to Prevent Future Phishing Attacks

To stay safe from phishing scams, follow these best practices:

Verify Emails Before Clicking

• Check the sender’s email address – DHL emails come from official domains like @dhl.com, not random addresses.
• Look for spelling errors and grammatical mistakes.
• Hover over links to see if they redirect to a suspicious domain.

Enable Two-Factor Authentication (2FA)

Activate 2FA on your DHL account and email accounts for extra security.

Use Anti-Phishing Software

Install SpyHunter or another anti-malware tool to block phishing attacks.

Never Reuse Passwords

Always use unique, strong passwords for different accounts.

Keep Software Updated

Ensure that your operating system and security software are up to date.

---

Final Thoughts

The “DHL – A Parcel Collection Has Been Registered” email is a dangerous phishing scam designed to steal login credentials and personal information. If you receive this email, do not click on any links or enter your details. Always verify emails from shipping companies, use anti-phishing software like SpyHunter, and follow best practices to stay safe online.