Overview

• Consumer protection agencies first detected this new overweight-fee phishing email variant on July 8 and 9
• Scammers embed the same fake tracking number in each message, redirecting users to a counterfeit DHL-style website
• Each email features an urgent “Pay Now” button that launches the fraudulent site to harvest passwords and credit card details
• Warning signs include the subject line “Aktueller Status Ihrer Sendung ”, generic salutations and suspicious sender addresses
• Authorities advise deleting these emails or marking them as spam and confirming any delivery charges only via DHL’s official app or website