DHL Impersonation Scams
Scammers send fake DHL delivery notifications to steal personal and payment details. The real DHL will never ask you to pay a surprise customs fee via a link in an unsolicited text.
Last reviewed: 1 June 2026
DHL is one of the world's largest courier networks, which makes it a prime target for impersonation. When you are expecting a parcel — or even when you are not — a message claiming to be from DHL feels plausible and urgent. Scammers exploit that familiarity.
The most common attack involves a text or email claiming your package is held due to an unpaid customs fee or failed delivery, with a link to a convincing fake DHL site that harvests your card details. Victims may also receive calls from people claiming to be DHL customer service, asking for personal information to 'verify' an account.
DHL itself is the victim of this impersonation. Understanding the tell-tale signs helps you protect yourself without second-guessing every genuine DHL notification.
How scammers impersonate it
- Sending texts or emails with DHL branding claiming a parcel is held pending a small fee payment
- Creating fake DHL websites with convincing logos and tracking-style interfaces
- Spoofing DHL email addresses or using domains with minor misspellings
- Calling victims and claiming to be DHL customer service to confirm personal details
- Including a genuine-looking tracking number to add credibility
- Sending fake 'missed delivery' cards with a QR code linking to a phishing site
What the real organisation never does
- Send an unsolicited text asking you to pay customs fees via a link
- Ask for your full card number, CVV, or banking password to release a parcel
- Threaten to destroy or return your parcel unless you pay immediately through a link
- Ask you to install software to track your shipment
- Request payment via gift cards or cryptocurrency
Common red flags
- Unexpected message about a parcel you were not expecting
- A link in a text rather than a reference number to check on the official site
- Urgency — 'your parcel will be returned in 24 hours'
- Request to pay a small customs or redelivery fee via a website link
- Poor grammar, inconsistent branding, or a domain that is not dhl.com
- QR code in a physical card that leads to an unfamiliar website
- Caller cannot confirm your full name or address without asking you first
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Text: 'DHL: Your parcel [tracking number] is held. Pay a customs fee of [amount] at [fake link] within 24 hours or it will be returned.'
Email: 'We attempted delivery on [date]. Reschedule at [fake link] and confirm your address.'
Call: 'This is DHL customer services — we need to verify your details before releasing your shipment.'
How to verify
- Go directly to dhl.com and enter your tracking number there — never via a link in a message
- Check whether you are actually expecting a DHL delivery before acting on any notification
- Look up the official DHL customer service number from dhl.com and call that if in doubt
- Hover over (or long-press) any link to check the actual URL before clicking
- If a fee is genuinely owed, DHL will typically advise you to pay through official channels at the depot or on their verified site
What to do if you're targeted
- Do not click any links or pay any fee through an unsolicited message
- Report the phishing message to your national fraud or cybercrime reporting service
- If you already entered card details, contact your bank immediately to block the card
- Forward suspicious DHL-branded emails to [email protected] if available in your region
Frequently asked questions
The text had my real tracking number — does that make it genuine?
Not necessarily. Scammers sometimes obtain tracking numbers from data breaches or use random numbers that happen to be valid. Always verify directly on dhl.com, not through the link in the message.
I paid a small fee through a link — what should I do?
Contact your bank or card provider straight away and explain you may have entered your details on a fraudulent site. Ask them to monitor or block the card. Also report the incident to your national fraud reporting service.
Is DHL responsible for these scam messages?
No. DHL is itself a victim of this impersonation. Scammers misuse the brand without authorisation. DHL actively works to take down fake sites and advises customers about known phishing campaigns.