Aussies warned over this DHL email: ‘Delete it immediately’

Expecting a package in the mail? Don’t fall for this DHL scam.

·2-min read
DHL email scam
Aussies have been told to watch out for this email claiming to be sent from DHL. (Source: Getty/MailGuard)

Aussies waiting for a package to arrive are being warned to watch out for a new DHL email scam.

Email security firm MailGuard said it was now blocking a new phishing scam. The email purports to be from the shipping company and claims you have a package that was unable to be delivered.

The email has the subject line “DHL Shipping Documents” and the sender appears to be “DHL Express”, however it is actually coming from a compromised account. At the top of the email, there is a preview of excel and PDF documents, which can be viewed or downloaded.

“Below this, the scammer has recreated the DHL logo and warns the recipient that their packages were unable to be delivered due to an incorrect address,” MailGuard said.

“They’ve also included a number of fake details, such as the scheduled delivery date, tracking number, and service option, in an attempt to feign authenticity.”

If you click either of the attachment links, you are directed to a phishing site that has been designed to look like a Microsoft SharePoint page. You are then asked for your email address and password to access the files.

DHL email scam
MailGuard shared these screenshots from the DHL email scam. (Source: MailGuard)

If you enter your password, you will be shown a “Network error” message. But, by this point, it is too late and your password will have been stolen by the scammer.

“Scammers are always on the lookout to steal Microsoft credentials as they serve as the gateway to a business’s sensitive data and systems,” MailGuard said.

“MailGuard advises all recipients of this email to delete it immediately without clicking on any links.”

Scammers often impersonate shipping companies like DHL and Australia Post and try to trick recipients into handing over their personal information, including banking details, passwords and credit card numbers.

Aussies have already lost more than $9 million to phishing scams this year. Text message scams have been the most commonly reported, followed by email and phone scams.

Follow Yahoo Finance on Facebook, LinkedIn, Instagram and Twitter, and subscribe to our free daily newsletter.