DHL ‘Package on the Way’ Malware Email
The original site is no longer online; links go to the Internet Archive copy.
What the fact-checkers found
According to this email, which purports to be from delivery company DHL, you have a package on the way.
Supposedly, DHL sent you the notification at the request of Apple. It instructs you to click a link to validate the shipment’s transit status and access an invoice.
However, DHL did not send the email, and it has no connection to Apple. And, clicking the link does not open an invoice or transit document.
Instead, clicking the link opens a compromised website that harbours malware. The site prompts you to download a file that supposedly contains the package shipping information.
But, opening the file can install the malware on your computer. The purpose of the malware package may vary. It may attempt to steal sensitive information such as banking passwords from your computer. Or it may lock up your computer files and demand that you pay a fee via Bitcoin to receive the unlock key.
Criminals regular use fake package delivery notifications to trick people into installing malware. Alternative versions claim to be from FedEx, UPS, Australia Post, USPS, The Royal Mail, and several other well-known courier companies.
If you receive such an email, do not click any links or open any attachments that it contains.
Got a similar message?
Paste it into the detector and see whether it matches a known hoax.
Check a similar messageRelated fact-checks
Browse the archive →Australia Post ‘Your Package has Experienced an Exception’ Malware Email
The email is not from Australia Post and the package it refers to does not exist. The email is designed to trick you into installing malware by clicking a link or opening an attached file.
Post Express ‘Incorrect Delivery Address’ Malware Emails
The email is not from Post Express or any legitimate postal delivery service. The claim that a package has been returned is untrue. The attachment does not contain a mailing label as claimed.
FedEx Incorrect Delivery Address Malware Email
The emails are not from FedEx. The claim that a package has been returned is a lie designed to trick recipients into opening the attached file or following a link. The attachment contains malware.
‘Delay With Your Order’ Malware Email
The email is not from any legitimate sales manager and the claim that an order has been delayed is just a trick to get you to open the attached file. The attachment contains a malicious javascript file that, if opened, can install malware on your computer.