dhl

DHL Shipment Update Scam

I received the following e-mail supposedly referring to a DHL shipment en-route to me. I have no expectation that any shipment is en-route to me from DHL or any other carrier but I suppose if the scammer sends out enough e-mails they are sure to land with someone expecting a shipment or who is just too careless to think before clicking on a link.

What are the scammers hoping to achieve... I am not sure, your personal information perhaps (phishing) but whatever it is it will benefit them financially and leave you out of pocket in this or another related scam.

E-Mail received:

Date: 21/03/2025, 12:44

From: DHL ® info@invoiceerver.org

To: [Name and E-Mail address redacted]

Reply to: support@invoiceerver.org

Subject: Shipment Update: Estimated Arrival Time Inside!

dhl shipment update scam

Notes

Genuine communications from DHL should come from dhl.com e-mail addresses and clickable links should be to dhl.com website pages. The e-mail comes from info@invoiceerver.org e-mail address (reply to address support@invoiceerver.org). Reading the address quickly you may think you are reading invoiceserver.org, but there is no letter "s" in the e-mail address. A whois search shows invoiceerver.org was registered on 20th Mar 2025, only 1 day before the e-mail was sent. Very suspicious for a long established brand such as DHL. When trying to access the website you are warned that it is a dangerous website involved in phishing.

Whilst there are genuine DHL links in the e-mail the Track your shipment button links to https://is.gd/UFQVAx/ which is a website with the country domain Grenada, a small island in the Caribean... clearly nothing to do with the genuine DHL organisation. The website https://is.gd is a domain shortening service which has been used to hide the ultimate destination website address. Do not click the button.

Recommendation:

Just delete the e-mail.

 

 

And a couple of months later I got another scam email...

E-Mail received:

Date: 2/06/2025, 14:37

From: DHL Tracking info@mail.servicedemoi.com

To: [Name and E-Mail address redacted]

Subject: ***SPAM*** Your shipment is out for delivery today

dhl delivery scam

Notes You know the "red flags" by now... sender email address does not belong to dhl info@mail.servicedemoi.com. Confirm payment button links to https://tx.gl/r/lwCOx/, tx.gl gives a 404 error. .gl domain extension is for Greenland, they can't be serious that it is a dhl address!

 

 

Recommendation:

Just delete the e-mail.

 

 

Michael Fowler

 

 

Other articles by Michael Fowler:

Vera Elasquez - Content Researcher and Freelance Journalist - Michael Fowler
This lady found my writing "exceptionally insightful. Your writing is not just informative, but truly illuminating on the subject. The clarity and depth of your research are remarkable"...   more >>

Government Gateway Phishing Scam - Michael Fowler
You can imagine the havoc and harm that can be inflicted if someone manages to trick you by a phishing e-mail redirecting you to a fake login page whereby you unknowingly reveal your username and password details...   more >>

Anti Virus Renewal Scam - Michael Fowler
Out of the blue comes an anti-virus program renewal e-mail. An anti-virus program you probably don't have. You are urged to respond urgently...   more >>

cPanel Password Expiry Scam - Michael Fowler
To hear that your cPanel might be inoperative if you don't immediately renew your password is a matter of concern. But pause, is this a genuine e-mail from cPanel?...   more >>

 

 

 

Credit: By Presumably DHL - Deutsche Post AG, Zentrale Marken und Konzernwerbung, Bonn, Public Domain, https://commons.wikimedia.org/w/index.php?curid=11654822