Summary DHL phishing uses display-name spoofing and fake OTP flow to steal passwords, IP, geolocation, and device data. The scam uses fake “confirm your waybill” steps and artificial delays to lower your guard. Protect yourself: check the URL, use a password manager, never enter on-screen codes, and verify on DHL’s site. A startling new report from Forcepoint X-Labs has shed light on a sophisticated DHL phishing campaign targeting users worldwide. By using familiar-brand impersonation and a fake OTP verification step, scammers are harvesting passwords, IP addresses, geolocation data, and device details from everyday users. This scam works by avoiding the high-stakes “account compromised” messages that set our alarm bells ringing in 2026. Instead, it exploits the mundanity of confirming a shipping waybill to trick you. While writing this article, I was expecting a package from DHL; I clicked on “confirm your waybill” without even thinking, only to realize what I’d done seconds later. The irony is palpable, but it proves how even tech-savvy users can get caught out now and then. Here’s everything you need …