"Your package is at the logistics centre!" – Into the phishing trap via a customs fee
Summary
Why is this warning issued?
This warning has been included because it is based on a report from Watchlist Internet. It is intended to protect other users from this scam. The classified risk is elevated.
How the scam works
- Recipients receive an email whose sender name is 'DPD' and which is titled 'Import receipt open'.
- Content of the email: A package with a tracking number is said to be at the logistics centre, a customs fee of EUR 1.85 is due, button 'Pay customs fee', deadline 48 hours.
- The low amount and the short deadline are intended to create stress while lowering caution.
- Clicking the button opens a portal that looks like DPD, with the address 'dpd.idverifyx.eu.cc'.
- There, an allegedly 'temporarily restricted' account is mentioned, which is to be unlocked via verification – allegedly within 24 hours.
- The victim selects their bank from 21 banks and is redirected to a fake login page of the respective bank.
- If the victim enters their login details there, they go directly to the criminals – giving them access to online banking.
How to recognise it
- Although the sender name is 'DPD', the email actually comes from a Brazilian address (speedcopy.com.br) – the sender name can be freely chosen.
- Cryptic, alarming subject line such as 'Import receipt open', designed to arouse curiosity.
- Claim of a customs fee of EUR 1.85 with a tight deadline of 48 hours until the alleged return shipment.
- The link leads to the domain 'dpd.idverifyx.eu.cc', which has nothing to do with DPD.
- On the fake portal, a 'temporarily restricted' account is suddenly claimed, which is to be unlocked within 24 hours via identity verification.
- Only the 'Verify' button works; all other links on the fake portal are dead.
- Ultimately, bank login details are to be entered on a fake bank page.
- Alleged customs/delivery fee via a link
How to protect yourself
- Do not click on links in unexpected emails. Instead, log in directly to the service and check there whether there is actually anything to do.
- If in doubt, contact the real parcel service provider – for example via the official website or hotline.
- If data has already been entered: contact the bank immediately and describe the situation.
- Change online banking login details immediately, if still possible.
- Monitor the account closely over the coming days and weeks for unusual activity.
- File a report with the police and seek advice from the consumer protection centre.
What you should never do
- Do not click the 'Pay customs fee' or 'Verify' button.
- Do not enter online banking login details on the linked page.
- Do not pay the demanded customs fee – there is no legitimate claim.
- Do not panic just because a short deadline is set – that is exactly what the criminals intend.
- Do not conceal any data that has already been entered – the bank and police must be informed.
Frequently asked questions
Do I have to pay the EUR 1.85 customs fee?
No. It is a phishing trap. There is no real package and no real customs fee – the low amount is only intended to tempt people to pay without thinking.
How did the scammers get my email address?
This is not clear from the source. What is known is that the criminals are exploiting vulnerabilities in the email system of a Brazilian company (Speedcopy) for sending.
Is the email really from DPD?
No. The sender name 'DPD' can be freely chosen. The actual sender address belongs to a Brazilian digital printing company and has nothing to do with DPD.
What do I need to do if I have already entered my bank details?
Contact your bank immediately, describe the incident and change your online banking login details. Monitor your account closely and file a report with the police. Additionally, seek advice from a consumer protection centre.
What happens if I simply don't respond?
If you don't click and don't enter any data, usually nothing bad happens – no package will be sent back, because the package does not exist. It is best to delete the email and, if in doubt, warn people who might see the same sender.
Affected data
Comments
No comments yet. Registered users can share their experiences.
Related warnings
- Betrugs-SMS zu Paketsendungen
- Klimabonus-Phishing ist zurück: Klicken Sie nicht auf diesen Mail-Link!
- Warnung vor falschen Amazon- und PayPal-Anrufen
- Vorsicht vor Telekom-Fake-Mails: So erkennen Sie die Betrugsmasche
- Phishing-Radar: Aktuelle Warnungen
- Phishing-Mails: Woran Sie sie erkennen und worauf Sie achten müssen
Original source
Find more information in the original source.
Watchlist Internet ↗Update history
- 22/07/2026Description updated
- 13/07/2026Warning added from an official source