Remove “DHL Express – Incorrect Billing Information” email

The “DHL Express – Incorrect Billing Information” email is part of a phishing campaign that targets users’ financial information. The email is disguised as a notification from logistics company DHL and informs recipients that there has been a delay in delivering their packages because of a billing issue. The email contains a link that leads to a fake DHL website that asks for users’ personal and payment card information. If this information is successfully stolen by malicious actors, they would use it for things like unauthorized transactions.

 

 

Phishing emails disguised as parcel delivery notifications are quite common, as users tend to open the attachments or click on links. This particular phishing email claims that there has been a delay in your package because of incorrect billing information. To supposedly process the package for the next shipment date, you need to reconfirm your payment information via the provided link.

If you click on the “Update Information” button, you will be taken to a fake DHL site that asks for your personal information (full name, home address, date of birth, phone number, and email address) as well as payment card details. If this information is typed in on this phishing site, it will be stolen by the malicious actors operating this phishing campaign.

Stolen personal information may be used by malicious actors to perform more sophisticated scams, as users are more likely to respond positively if they’re addressed by name when contacted. If malicious actors also steal users’ payment card information, it would be used to make unauthorized transactions. Cybercriminals would either make big transactions or small ones so users do not immediately notice.

The full contents of the “DHL Express – Incorrect Billing Information” malicious email are below:

Subject: Dear Valued Customer

Dear Valued Customer,

This is to inform you that there was a delay on your package due to the incorrect billing information .

To process your package for the next shipment date, please re-confirm your payment information , thank you..

Update Information

Important Note: If delivery attempts are unsuccessful due to unavailability, Our DHL courier will automatically return the next workday..

Best Regards,
The DHL EXPRESS Team

How to recognize phishing emails?

Phishing campaigns that send generic emails to many recipients are often easy to identify due to their lack of credible information, grammar/spelling mistakes, and overall unprofessional appearance. In contrast, more advanced phishing attempts target specific individuals/companies, using personal details to enhance credibility. Fortunately, the majority of users encounter generic phishing emails.

When receiving an unsolicited email asking you to click a link or open an attachment, your first course of action should be to verify the sender’s email address. This can be done by searching the address online to confirm if it matches the purported sender or organization. Malicious addresses often appear random and suspicious, making them relatively easy to spot. This particular “DHL Express – Incorrect Billing Information” email is sent from customers@mail.com, and that is an immediate giveaway that you’re dealing with a malicious email, as the sender’s email address does not use DHL’s domain. However, cybercriminals may disguise their email addresses by substituting letters or adding extra characters to mimic legitimate companies, so you need to be careful.

Another red flag in phishing emails is poor grammar and spelling mistakes, which are common indicators of malicious intent. While shorter emails may contain fewer errors, glaring mistakes are still common. Official correspondence from reputable service providers, such as DHL, will never have mistakes because they look unprofessional and would cause suspicion. For example, the “DHL Express – Incorrect Billing Information” email contains multiple grammar mistakes that reveal its malicious nature. What’s more, the email addresses you as “Valued Customer”, which is something malicious emails do when cybercriminals do not know the recipient’s name.

It is crucial not to act hastily when dealing with these emails, especially if they urge immediate action. Take time to assess the email’s legitimacy and consider whether it makes sense for you to receive such a message. For instance, if you receive the “DHL Express – Incorrect Billing Information” email but are not expecting a package, it is an obvious sign that the email is fake.

Remaining vigilant and cautious is key when handling suspicious emails. Evaluate the context, verify the details, and avoid taking impulsive actions that could compromise your device and information’s security.

Remove “DHL Express – Incorrect Billing Information”

In case this “DHL Express – Incorrect Billing Information” email lands in your inbox, just delete it. If you have clicked on the link in the email and entered your personal and payment card information, you need to contact your bank to cancel the card as it has been compromised. There’s nothing you can do about your personal information being in the hands of these cybercriminals, but you can at least be cautious when dealing with unsolicited contact, including via phone and email.