Overview
- Fake cards placed in mailboxes copy DHL branding and push recipients to scan a code leading to lookalike webpages that request names, addresses, and payment data.
- DHL says genuine paper notices include a printed receipt with recipient, tracking number, and pickup location, and they never ask for personal data via QR codes.
- Customers should avoid scanning codes or calling numbers on such slips, verify shipments on the official site or in the Post & DHL app, and perform any required Packstation scans only inside the app.
- A DHL spokesperson reports a rise in QR-based phishing during the pre-Christmas rush, with similar fraud also affecting Hermes and UPS users.
- Those who entered information are advised to change passwords, alert banks and card issuers, and monitor accounts for unauthorized activity.