Authorities in Lower Saxony and Hamburg are warning residents about a widespread “quishing” scam targeting individuals through fraudulent package notifications. The scam involves criminals using QR codes to steal personal data.
Fraudulent Package Notices Circulating
Police in the Aurich district have reported multiple instances of fake DHL package notices being placed in private mailboxes. In the districts of Oldenburg and Vechta, authorities are also alerting citizens to quishing attempts via WhatsApp. According to police, these DHL-branded notices, complete with QR codes, appear convincingly authentic. Some notices also include a website address and a personal code, prompting recipients to provide delivery details – information scammers intend to exploit.
DHL Denies Involvement
DHL has confirmed that these notification cards are not issued by the company and that they never request personal information through such cards. While Hamburg police have not yet received reports of specific cases, citizens are already sharing warnings about the flyers on WhatsApp. Both DHL and the police advise discarding these cards, avoiding scanning any QR codes, and refraining from clicking any links.
What is “Quishing”?
“Quishing” is a type of phishing scam that utilizes QR codes (“Quick Response” codes) to direct victims to malicious websites or to collect their personal information. Scammers often mimic legitimate companies, like DHL in this case, to gain trust.
Recent Related Incidents
Similar fraudulent activity has been reported in other areas. In Bad Harzburg and Goslar, QR codes on parking payment machines were replaced with malicious codes. This demonstrates a broader trend of scammers targeting public infrastructure to intercept financial information.
Frequently Asked Questions
What should I do if I receive a suspicious package notice?
According to the police and DHL, you should discard the notice immediately, do not scan any QR codes, and do not click on any links provided.
Does DHL ever ask for personal information via text or package notices?
No, DHL states that they never request personal information through text messages or package notices.
What information are scammers trying to obtain?
Scammers are attempting to obtain phone numbers, names, bank account details, and credit card numbers from potential victims.
As these scams evolve, will you be able to recognize and avoid becoming a victim of these increasingly sophisticated tactics?
Related reading