/ Scams

Scam alert: fake DPD ‘missing address’ emails

DPD is the latest delivery company being impersonated by fraudsters trying to get their hands on your personal information – have you received this fake email?

As people are expecting more parcels at this time of year, scammers know there’s a chance many of us might be more likely to hand over information or payment in return for a package that’s waiting to be delivered.

This email looks like it’s from courier company DPD, but it’s fake. It’s a phishing attempt, aiming to steal valuable details.

Spotting a DPD phishing email

The link takes the recipient of the email to a page that requests more personal information. There are two classic giveaways that this email isn’t real.

Firstly, when we clicked on the sender’s email address, it wasn’t from a DPD email address, but from ‘@telenet.be.’

Secondly, there is the spelling mistake in the email’s title. ‘Reassing’ isn’t a word, and probably a misspelling of ‘reassessing.’ An official DPD email shouldn’t contain basic mistakes like this.

A few similar phishing emails have been circulating for some time, including ones that claim to be from the Royal Mail and courier firm DHL. All of them try to trick you into giving away payment or personal details.

A spokesperson for DPD told us:

We are aware that there have been a number of fake DPD emails trying to get consumers to send money for parcels to be re-directed or re-delivered. We would never do this nor would we ask consumers to give us their bank details.

There is an easy way to check the email is safe, only emails sent from one of three DPD email addresses are genuine, these are dpd.co.ukdpdlocal.co.uk or dpdgroup.co.uk.

Fake or scam emails are nearly always sent from a private email address and certainly not from an official DPD one.

Consumers should always check the sender’s email address and check the message has come from a valid DPD address i.e. dpd.co.ukdpdlocal.co.uk or dpdgroup.co.uk

Any other sender email address, especially if the email is asking for money is highly likely to be a scam email.

We would encourage anyone who has received a fake email to report it to report@phishing.gov.uk.

Guide: how to spot a scam email

Dealing with scam emails

If you’re not 100% sure whether an email is really from a courier because you’re expecting a delivery, see if you can check the reference or tracking number and whether it matches the order you’re waiting for.

You can also contact the delivery company directly to check whether the email is real. 

If you have given away any personal details after receiving a message like this, let your bank know immediately, and also keep an eye out for any unusual bills or accounts that might have been set up in your name. One way to do this is by regularly checking your credit file.

Guide: getting your money back after a scam

Once you’ve let your bank know, it should watch your account for fraudulent activity or can give you new card or account details altogether. 

Have you received this fake DPD email? Have you experienced phishing attempts for other courier companies?

Comments
Luke Hear says:
14 January 2021

When you say “You can also contact the delivery company directly to check…” well, no, you can’t. The number for our nearest DHL depot is never answered and the address is not published.

Peter Pulton says:
17 January 2021

They are getting better, this one that I received today from “DPD” doesn’t have any spelling mistakes, as far as I can see. I have often wondered why they don’t spell check or get them proof read by someone with even a fairly basic grasp of English. Looks like they are now wising up! —

“We require additional input and information from you to successfully deliver parcel 88327073556147.
The delivery address provided for this parcel is incomplete, and we require further details to make a delivery.
Verify now

If you cannot provide a response to this action within seven days, the parcel will be returned”

Mari says:
18 January 2021

Yep. Received fake email today

William says:
20 January 2021

Received DPD email today. Looks quite convincing. Cannot deliver, need £2 or £3 for redelivery. Private email address etc.

Today interestingly the 3 dpd email addresses given all came as ‘invalid address’ … maybe they don’t want any contacts at all?