From their website :
FRAUD AWARENESS
Fraudulent Use of the DHL Brand
Attempts have been made to defraud Internet shoppers by the unauthorized use of the DHL name and brand via email communications and graphics which appear, on the surface, to have originated from DHL.
In most cases the communications concern the sale of consumer goods over the Internet where payment may be requested before the goods are delivered.
Please be advised that DHL does not request payment in this manner. DHL only collects money due for official DHL related shipping expenses.
This security notice does not affect the obligation of a consignee to pay shipping, customs, VAT or similar charges, where these are properly payable at the time of delivery.
DHL accepts no responsibility for any costs, charges or payments made which were improperly incurred as a result of fraudulent activity.
Websites
If you are in any doubt as to the integrity of a website that uses the DHL brand, please always access DHL websites via our global website.
Visit DHL Global Website for more information
https://www.dhl.com/ph-en/home/footer/f ... eness.html
DHL Fraud Awareness Guidelines
Thank you for joining our effort to combat online fraud. DHL goes to great lengths to protect our customers from fraud. If you suspect having received fraudulent emails, SMS or found a website or social media account that tries to pass off as DHL, we encourage you to let us know at your earliest convenience, so that we can quickly take actions to stop the fraud.
Please report all suspicious activity to our dedicated Anti-Abuse Mailbox at
phishing-dpdhl@dhl.com following the below instructions.
We thoroughly investigate every report of suspected fraud, but generally, will not respond to personal inquiries. If you have questions regarding the status of a shipment or an invoice, please direct those to our customer support.
Fraudulent Email
Below are some indicators that can help you assess whether the received email is fraudulent.
Official DHL communication is always sent from @dhl.com, @dpdhl.com, @dhl.de, @dhl.fr or another country domain after @dhl.
We never use @gmail, @yahoo or other free email services to send emails.
We never link to a website other than our own starting with for example
https://dhl.com/,
https://dpdhl.com/, or a country/campaign website
From a desktop computer:
Drag & Drop the suspicious email into a new message and send it to
phishing-dpdhl@dhl.com as attachment. To effectively shut down the fraudulent service, we need complete mail headers which are not included in a forwarded message.