Security information
Fraudulent WhatsApp application
WARNING OF A NEW SCAM IMITATING DPD COMMUNICATION USING WHATSAPP APPLICATION
We would like to warn our customers about a new type of fraud where a fraudster tries to extort payment card details (including validity and CVV code, which then allows the card to be used extensively). The fraudulent communication uses DPD logos and abbreviations imitating official DPD sources, e.g. dpd.cz or dpd-cz. The communication takes place via the communication tool/application WhatsApp, from different phone numbers.
Currently, we record two types of fraudulent communication:
-
The fraudster responds to advertisements on public advertising servers, pretending to be interested in buying the item. However, in the communication, he sends a link requesting "on behalf of DPD" to fill in the details of a payment card to which DPD is then to send the payment he claims to collect. He fraudulently describes this as a 'secure cash on delivery' payment. Similar communications from the fraudster are recorded in both Czech and Slovak. The method of attempting to extort data is so far identical in both cases.
-
On public websites, especially on various public advertising servers, there are mentions of DPD and the method of payment for the sale of goods via carriers, e.g. to DPD. The fraudsters ask for the card number including the account balance and all security details.
Examples of fraudulent communication can be found in the attached images below (please click and download for full resolution).
Direct Parcel Distribution CZ s.r.o. (DPD CZ) does not arrange the sale of goods or services for other entities and does not arrange any payment transactions, except for the delivery of goods on delivery and subsequent payment of the COD amount to the sender's account according to the sender's instructions. We never require payment information to be entered into unauthorized sources. We never request credit card numbers, CVV codes, etc. from our clients, either senders or receivers of shipments, in this way.
Fraudulent WhatsApp application
WARNING OF A NEW SCAM IMITATING DPD COMMUNICATION USING WHATSAPP APPLICATION
We would like to warn our customers about a new type of fraud where a fraudster tries to extort payment card details (including validity and CVV code, which then allows the card to be used extensively). The fraudulent communication uses DPD logos and abbreviations imitating official DPD sources, e.g. dpd.cz or dpd-cz. The communication takes place via the communication tool/application WhatsApp, from different phone numbers.
Currently, we record two types of fraudulent communication:
-
The fraudster responds to advertisements on public advertising servers, pretending to be interested in buying the item. However, in the communication, he sends a link requesting "on behalf of DPD" to fill in the details of a payment card to which DPD is then to send the payment he claims to collect. He fraudulently describes this as a 'secure cash on delivery' payment. Similar communications from the fraudster are recorded in both Czech and Slovak. The method of attempting to extort data is so far identical in both cases.
-
On public websites, especially on various public advertising servers, there are mentions of DPD and the method of payment for the sale of goods via carriers, e.g. to DPD. The fraudsters ask for the card number including the account balance and all security details.
Examples of fraudulent communication can be found in the attached images below (please click and download for full resolution).
Direct Parcel Distribution CZ s.r.o. (DPD CZ) does not arrange the sale of goods or services for other entities and does not arrange any payment transactions, except for the delivery of goods on delivery and subsequent payment of the COD amount to the sender's account according to the sender's instructions. We never require payment information to be entered into unauthorized sources. We never request credit card numbers, CVV codes, etc. from our clients, either senders or receivers of shipments, in this way.
WhatsApp9.png
WhatsApp4.png
WhatsApp5.png
WhatsApp6
WhatsApp7.png
WhatsApp8.png
screenshot2_podvod_whatsapp
Screenshot4_Browser_Whatsapp
screenshot1_podvod_whatsapp
Screenshot3_Browser_Whatsapp
Phishing emails
WE ARE WARNING AGAINST PHISHING EMAILS IMITATING COMMUNICATION FROM DPD
Direct Parcel Distribution CZ s.r.o. warns against fraudulent emails that pretend to be official messages sent by DPD that are delivered to various email addresses of both natural and legal persons. The email might be sent from various email addresses acting like DPD, but they are never sent from the dpd.cz or dpd.com domain. The domain itself is one of the very distinguishing features pointing to a fraud - phishing emails come from misused domains of other, usually foreign entities. A fraudulent email usually tries to put the addressee up to click on the link that redirects the parcel or orders another attempt of delivery. In the same time, it does not contain the number of the alleged parcel and, contrarily, there are grammatical mistakes or non-typical phrases in most cases, created as a result of automatic translation of foreign spam texts. DPD never invites its clients or consignees to pay any additional fees for its standard services and never charges any of the three delivery attempts. All the official communication of DPD is carried out from the official company domains and via DPD applications. It is always provided with a clear and right identification of the DPD company. If you come across of a similar suspicious email, we recommend you NOT to REACT in any way to it, NOT to PAY anything and NOT to CLICK on any links it contains. Simultaneously, we would like to ask you to contact our customer service at its real email address: [email protected] (and include the fraudulent email). Our own domains are secured against misuse, as well as personal data we manage. Thank you for being cautious.
Phishing emails
WE ARE WARNING AGAINST PHISHING EMAILS IMITATING COMMUNICATION FROM DPD
Direct Parcel Distribution CZ s.r.o. warns against fraudulent emails that pretend to be official messages sent by DPD that are delivered to various email addresses of both natural and legal persons. The email might be sent from various email addresses acting like DPD, but they are never sent from the dpd.cz or dpd.com domain. The domain itself is one of the very distinguishing features pointing to a fraud - phishing emails come from misused domains of other, usually foreign entities. A fraudulent email usually tries to put the addressee up to click on the link that redirects the parcel or orders another attempt of delivery. In the same time, it does not contain the number of the alleged parcel and, contrarily, there are grammatical mistakes or non-typical phrases in most cases, created as a result of automatic translation of foreign spam texts. DPD never invites its clients or consignees to pay any additional fees for its standard services and never charges any of the three delivery attempts. All the official communication of DPD is carried out from the official company domains and via DPD applications. It is always provided with a clear and right identification of the DPD company. If you come across of a similar suspicious email, we recommend you NOT to REACT in any way to it, NOT to PAY anything and NOT to CLICK on any links it contains. Simultaneously, we would like to ask you to contact our customer service at its real email address: [email protected] (and include the fraudulent email). Our own domains are secured against misuse, as well as personal data we manage. Thank you for being cautious.
