Latest Threat: DHL Express "Customs Clearance Required" Phishing Scam
February 02, 2026
A phishing campaign is currently impersonating DHL, targeting individuals and businesses with fake "Customs Clearance" alerts. The email, titled "Expédition Alerte - Examen requis," claims that an international shipment has arrived at a regional customs facility and requires updated recipient details to maintain the delivery schedule.
The scam uses high-pressure tactics, including a 24-hour deadline, to rush victims into clicking a malicious link and providing personal or financial information.
How to spot this phishing attack:
1. The Sender Address is Fraudulent: While the display name says "Shipping Notification," the actual email address is [email protected]. Official DHL communications will always originate from an official dhl.com domain.
2. Malicious Portal Link: The "Continuer vers le Portail" button leads to logisdistro.com. This is a fraudulent domain designed to mimic a logistics portal. Official DHL tracking and customs procedures are always hosted on dhl.com or its verified subdomains.
3. Generic Greeting: The email addresses the recipient as "Bonjour info" (using the start of the email address info@********.lu) rather than a real name. Legitimate shipping notifications for registered users typically include a full name or specific account details.
4. Artificial Urgency: The requirement to submit information within 24 hours is a hallmark of social engineering. Scammers create a sense of panic to prevent you from taking the time to verify the sender.
If you receive this email, do not click the link. Delete it immediately. If you are expecting a package, always track it by entering your tracking number manually on the official dhl.com website.