Report to DHL

• Fake DHL delivery and customs-fee notices
• Texts claiming a parcel is held pending payment
• Emails using the DHL name from non-DHL domains
• Fake DHL job and courier recruitment offers

1. 1

   Drag the email into a new message

   Create a new message to phishing@dhl.com and drag the suspicious email into it, which attaches it whole. DHL asks for it as an attachment specifically.

2. 2

   If you cannot drag and drop, forward as an attachment

   DHL notes that complete mail headers are needed and that a plain forward does not include them. Use your mail client's forward-as-attachment option instead.

3. 3

   Check the sender against DHL's real domains

   DHL sends from @dhl.com and its subdomains such as @del.dhl.com and @express.dhl.com, from @dpdhl.com, @dhl-news.com, and from country domains like @dhl.de or @dhl.fr. It never uses Gmail, Yahoo or other free providers.

• The email itself, as an attachment with headers intact
• The tracking number quoted in it
• The amount and card used, if you paid a "fee"

DHL says it investigates every report but generally does not reply to personal enquiries. Treat it as intake. A fee you paid is recovered through your bank.