It looks like a normal message – a package is on its way, click for more information. But one click can cost you everything. In recent months, Slovenian users have been under increasing pressure from online scammers who misuse the names of well-known delivery companies such as DPD. The goal? Stealing data and emptying bank accounts.
These are highly convincing and professionally designed scams that spread through SMS messages, e-mails, and even social-media ads. They are often so well-crafted that they fool even experienced online shoppers. And what’s worst – they appear almost every day in a new form.
Below, we reveal the latest scam techniques, real examples, and tips on how to protect yourself. If you frequently order packages or sell items online, read carefully.
“Great deals” that disappear without a trace
Online stores promising exclusive promotions and massive discounts are one of the most popular scam methods. Fraudsters create fake shops, often advertised on social media. They offer products from well-known brands at suspiciously low prices. After placing an order and paying (sometimes even cash-on-delivery), the package you receive is, of course, not what you ordered. The seemingly legitimate shop disappears, along with any contact information or ways to request a return or refund.
A scam that exploits sales between private individuals
Particularly dangerous and increasingly common is the so-called “DPD pickup scam.” In this scenario, the scammer pretends to be an interested buyer on platforms like Bolha or Facebook Marketplace. After initial contact, they suggest having a DPD courier handle the pickup, supposedly to simplify the process. In reality, they send a link to a fake website where the seller is asked to enter personal information to “receive payment.”
This form has nothing to do with DPD, and entering your data enables the scammer to access your bank account or charge a fake “fee.”
DPD Slovenia emphasizes that they do not offer such services, do not participate in financial transactions between private individuals, and never ask recipients to enter any personal or banking information.
Professionally written messages with one goal – stealing your data
One of the most common tricks relies on an SMS or e-mail supposedly sent by a delivery company. The message warns you that there was a problem with your delivery – the package is “on hold,” and you need to confirm your address and pay a small fee. The link takes you to a fake website that looks almost identical to the official one. Details like logos, language, and colors are carefully replicated, and the pages are becoming increasingly sophisticated.
The goal of these messages is always the same: to obtain your personal data, credit-card number, or login credentials. Many people realize what happened only after discovering their bank account is empty.
Protection is simple – but it requires attention
Even though scams are becoming more sophisticated, you can still recognize them if you pay attention to these five tips:
-
Do not click suspicious links: official delivery-company domains are clear and do not include additions like “.online”, “.xyz”, or “-delivery.” DPD Slovenia states that all their messages and websites use the domain dpd.si or dpdgroup.com.
-
Check the sender: e-mails and SMS messages should come from a logical domain (e.g., @dpd.si, not @dpd-slovenija.mail.ru).
-
Never enter personal or banking information unless the source is verified.
-
Use two-factor authentication for bank accounts and e-mail.
-
Install antivirus protection on all devices.
What to do if you suspect a scam?
If you receive a suspicious message or e-mail, or if someone contacts you on a selling platform claiming DPD will handle the pickup, do not act impulsively. Take a moment to think and verify. If the message supposedly comes from a company like DPD, visit their official website directly instead of using the link provided.
If you are unsure whether the message truly comes from DPD Slovenia, you can always contact DPD customer support at [email protected], or report the scam to SI-CERT or the police.
DPD Slovenia also emphasizes:
“DPD as a delivery service is not responsible for the contents of packages. We deliver shipments on behalf of online retailers or private individuals, and we do not have insight into what they contain. We also cannot intervene in refund processes or help resolve disputes between buyers and sellers. This is why it is even more important to verify the reliability of the seller and the platform before making any purchase.”
There is no absolute protection against online scams – but by identifying them early, you can prevent scammers from exploiting your inattention.
If you want to learn more about online fraud involving DPD, you can visit their website: https://www.dpd.com/si/en/security/
