Fake DHL Tracking Number Phishing Scam
Scammers send emails and texts containing fabricated DHL tracking numbers that link to phishing sites rather than the real DHL tracking system, used to harvest card details or credentials under the guise of resolving a delivery issue. Real DHL tracking numbers always resolve at dhl.com.
Part of: Fake Tracking Number Scams
Last reviewed: 7 June 2026
A convincing tracking number is the centrepiece of many DHL phishing campaigns. Criminals generate plausible-looking alphanumeric strings that mimic DHL's genuine tracking number formats and pair them with urgent messages about delivery exceptions, customs holds, or address mismatches.
The fake number serves a psychological function: it makes the message feel specific and legitimate rather than a generic mass blast. Recipients who are expecting parcels may instinctively assume the number relates to their shipment and click through without checking.
The single most reliable test is to copy the tracking number and enter it directly at dhl.com. If it returns no result — or a result that does not match your expected shipment — the number is fabricated.
How this scam works on the DHL brand
Phishing emails arrive with a subject line such as 'DHL Shipment Notification — [fake tracking number]' and a body explaining that delivery was attempted or that a customs query has arisen. The 'Track your shipment' button links to a convincing fake DHL tracking page that asks for personal details or payment to progress the delivery.
Real DHL tracking pages are exclusively at dhl.com. DHL tracking numbers follow identifiable formats depending on service type — for example, DHL Express international shipments use a ten-digit numeric format, while DHL Parcel domestic shipments in some countries use alphanumeric codes. Mismatches between the claimed service and the tracking number format are a quick tell.
Business-targeted variants embed fake tracking numbers in fake commercial invoices, claiming a shipment is awaiting export documentation fees or import duties that must be paid via an invoice link.
Common red flags
- Tracking number does not resolve or matches an unrelated shipment at dhl.com
- Tracking number format does not match the DHL service claimed
- Link attached to the tracking number goes to a non-dhl.com domain
- Email claims a delivery exception with a payment link rather than directing you to sign in at dhl.com
- No record of the shipment in your DHL account
- Commercial invoice or customs fee demanded via an email link
- Sender email is not from @dhl.com or a known DHL regional domain
How to protect yourself
- Always verify tracking numbers by entering them directly at dhl.com — not by clicking a link
- Cross-reference tracking numbers with the sender of the shipment you are expecting
- Log in to your DHL account to see all active shipments associated with your details
- Forward suspicious emails to [email protected]
- If a customs or fee issue is genuine, DHL will communicate through your account or official documentation
How to report it
- Report phishing to DHL at [email protected]
- Forward smishing texts to 7726
- Report to Action Fraud (UK) at actionfraud.police.uk or the FTC (US) at reportfraud.ftc.gov
- Report phishing sites to the Anti-Phishing Working Group at [email protected]
- Contact your bank if financial details were entered
Frequently asked questions
What does a real DHL Express tracking number look like?
DHL Express international tracking numbers are typically ten numeric digits (e.g. 1234567890). You can verify any DHL tracking number for free at dhl.com without providing personal or payment information.
Can a fake tracking number cause harm just by opening the email?
Opening a plain-text email is generally low risk, but clicking any links or opening attachments could expose your device to credential-harvesting pages or malware. Never interact with links you have not verified.
What if the tracking number appears to match my expected parcel?
Enter the number directly at dhl.com in a new browser window — do not use the link in the email. If it matches, manage your shipment from within your DHL account; if it does not, report the email as phishing.