Fraudsters use parcel shipping at Christmas to obtain credit card details using a fake DPD email.

The holidays may be over, but some gift packages are still on the way. Fraudsters are currently using this to send an increasing number of fake emails about packages that don't even exist. An email supposedly from DPD is currently circulating - but the fraudsters only want your credit card details.

This is what the email looks like:

The fake DPD email
The fake DPD email
The text in the email reads:

“Update to package 15504880058988

Today 12/26/2021 - 12:25:39 - The delivery address provided for this package is incomplete

We need further information for a delivery.

Update address"
Some email programs do not show the sender's full email address (as in the screenshot above), which makes it appear as if the email really comes from DPD, but with other programs it is clear that something is wrong The email comes from “ [email protected] ”, which means it comes from Brazil.

What happens when you click the link

Of course, many users are still curious as to what is wrong with the addressing, because it could be that another package is really expected. So you quickly clicked or typed on “Update address” and then the information comes up:

Unsuccessful delivery - on a Sunday
Unsuccessful delivery – on a Sunday

Apparently an attempt was made to deliver the package, but no one was there and there was no safe place to leave it. Wait... didn't the email say that the delivery address was incomplete?

No matter, we still tap on “Postpone delivery” and now have to specify when we want to receive the package – which suddenly also costs a small fee. And no, there is usually no fee for this!

A fee for a postponed delivery date?
A fee for a postponed delivery date?
By the way, the URL (internet address) clearly shows that we are by no means on the real DPD website . Nevertheless, we are still clueless, specify a delivery date and click “Continue”. After entering the full address, we come to the dangerous point:
We are supposed to enter credit card details
We are supposed to enter credit card details
Anyone who enters their real credit card details at this point allows the fraudsters to debit money from the credit card at will and misuse the data!

Conclusion

If you have entered your data on the fake DPD website via such an email, you should inform the credit institution immediately and have your credit card blocked! Always pay attention to whether an email actually comes from the named sender. The many illogicalities are also a strong indication of a phishing attempt.

Also interesting:
Advertisements on social media promise a quick loan – regardless of the Schufa score. However, those affected usually do not get the loan. But high bills.
Sign up for the Mimikama newsletter

Notes:
1) This content reflects the current state of affairs at the time of publication. The reproduction of individual images, screenshots, embeds or video sequences serves to discuss the topic. 2) Individual contributions were created through the use of machine assistance and were carefully checked by the Mimikama editorial team before publication. ( Reason )