DHL Delivery Notification Email You Didn't Expect — Is It a Scam?
An email from DHL says a package is being held for you or a delivery attempt failed. You don't recall expecting a DHL delivery. These fake DHL emails are among the most common phishing scams worldwide — DHL is the most impersonated shipping brand globally. The links lead to credential-stealing websites.
Think this email is a scam?
Forward it to us and get a free risk assessment in under 60 seconds.
How This Scam Works
High Risk — Globally Most Impersonated Shipping Brand
DHL is the most impersonated shipping brand in phishing campaigns worldwide. Any unexpected DHL delivery email should be verified directly at dhl.com before clicking any links.
You receive an email claiming to be from DHL saying a package is being held for you, a delivery attempt failed, or you need to pay customs or shipping fees. The email includes DHL's distinctive yellow and red branding and may contain a tracking number.
The link leads to a fake DHL website that asks for your personal information, login credentials, or credit card details. Some versions contain malicious attachments disguised as shipping labels or customs forms that install malware on your computer.
According to Check Point Research's Brand Phishing Reports, DHL has repeatedly ranked among the most impersonated brands in phishing emails globally, frequently appearing in the top three alongside Microsoft and Google. The global reach of DHL — operating in over 220 countries — makes it an effective lure for scammers targeting people in any country.
Red Flags
- Delivery notification for a DHL package you're not expecting
- Sender address is not from @dhl.com
- Link does not point to dhl.com
- Asks for payment to release or redeliver a package
- Contains an attachment labeled as a shipping label or customs form
What You Should Do
What To Do
- Do not click any links or open any attachments
- If there's a tracking number, verify it at dhl.com/tracking
- Do not pay any fees through email links
- Report phishing to DHL through their official fraud awareness page at dhl.com
- Delete the email
How to Verify Legitimately
Go directly to dhl.com and use the tracking tool. Enter any tracking number from the email to check if it's real. If you're expecting a DHL delivery, verify the tracking number with the sender or retailer who shipped the package. DHL also has an official app for tracking deliveries.