D
DHL
Exploiting NZ package recipients with fake delivery-notification scams designed to harvest payment details or install malware.
Official indicators
D
DHL<noreply@dhl.com>
To: you@example.com
For your security, please Track Your DHL Shipment to complete this action.
Original URL: https://www.dhl.com/nz-en/home/tracking.html. Click or tap if you trust this link.
What real DHL messages look like
- Official emails come from @dhl.com, @dpdhl.com, or @dhl-news.com — nothing else
- DHL will never ask for payment via a link in an SMS or email
- Tracking numbers can always be verified directly at dhl.com — use this instead of clicking email links
- Any customs or delivery payment will be communicated through the DHL app or official website, never via an unsolicited text
Common spoof patterns
- "Your parcel is on hold: Pay outstanding customs fee" SMS with a short link
- "Missed delivery" emails prompting you to reschedule and enter card details
- Fake "DHL Express" invoices requesting urgent payment
- Lookalike domains such as dhl-delivery.com, dhl-nz.com, or dhI.com (capital I instead of lowercase l)