Fake DHL Parcel-Locker Phishing Scam
Fraudsters send fake DHL notifications about parcel-locker assignments, directing recipients to a phishing site to retrieve an access code or pay a locker-release fee. DHL Packstation access codes are sent only through the verified DHL Parcel app or SMS to the registered number — never through an unsolicited external link.
Part of: Parcel Locker Phishing Scams
Last reviewed: 8 June 2026
DHL Packstations are automated parcel lockers used across Germany, Austria, and other markets. Parcel recipients registered with a DHL account use a unique access code to open the locker compartment containing their delivery. The process is familiar and trusted, making fake Packstation notifications an effective phishing vehicle.
Scammers send SMS messages or emails claiming a parcel has been assigned to a nearby Packstation locker and that the access code can be retrieved by clicking a link. The link leads to a fake DHL account login or a payment page claiming a small holding fee is required.
DHL sends genuine Packstation access codes directly to the recipient's registered mobile number or through the DHL Parcel app after secure login. It does not send access codes via unsolicited links to external sites, and it does not charge additional fees to release a parcel from a Packstation.
How this scam works on the DHL brand
A convincing SMS arrives: Your DHL parcel has been placed in Packstation [number] at [nearby address]. Retrieve your code at [link]. The link opens a DHL-branded page asking for account login or a one-time card payment of a few euros to generate the access code.
Some variants claim the locker holds a high-value or time-sensitive item and that the code will expire if not retrieved within two hours, creating urgency. Others direct the victim to enter their DHL account password to confirm identity before displaying the fake code — harvesting credentials for account takeover.
Because Packstation fraud typically targets countries where Packstations are common infrastructure, the phishing messages often correctly identify a real nearby Packstation number, adding to the deception.
Common red flags
- SMS or email provides a link to retrieve a DHL Packstation code — real codes arrive directly from DHL without needing to visit an external link
- Link leads to a URL that is not the official DHL app or dhl.com
- Message claims a fee is required to release a parcel from a Packstation — DHL does not charge this
- Access code retrieval page asks for full card details or account password
- You have no pending DHL deliveries in your account
- Urgency framing: code expires in two hours if not retrieved
- The Packstation number in the message cannot be verified through the official DHL finder
How to protect yourself
- Retrieve Packstation codes only through the DHL Parcel app or your DHL account at dhl.com
- Never click a link in an SMS claiming to provide or require action to retrieve a locker code
- Check your DHL account for any genuine deliveries assigned to a Packstation
- If you entered credentials or card details at a fake page, change your DHL account password immediately and contact your bank
- Report the phishing attempt to DHL at [email protected]
- Forward the smishing SMS to 7726
How to report it
- Email [email protected] with the message content and link
- Forward the smishing text to 7726
- In Germany, report to Bundesnetzagentur at bundesnetzagentur.de
- In the UK, report to Action Fraud at actionfraud.police.uk
- In the US, report to the FTC at reportfraud.ftc.gov
Frequently asked questions
How does DHL normally send Packstation access codes?
DHL sends Packstation access codes as a PIN directly to your registered mobile number by SMS, or you retrieve them from the DHL Parcel app after secure login. There is no intermediate website that requires card payment or an external link to generate the code.
Can I verify whether a real parcel has been assigned to a Packstation?
Yes. Log in to your DHL account at dhl.com or open the DHL Parcel app. All active deliveries, including those assigned to Packstations, are visible in your delivery overview. If no such delivery appears, the notification is fraudulent.
Is there ever a fee to retrieve a parcel from a DHL Packstation?
No. DHL does not charge recipients a fee to access their Packstation compartment. The locker opens using the free access code provided through your DHL account. Any message claiming a release fee is fraudulent.