EDIT: APOLOGIES! I didn't realize that the iCloud Mail was changing the from address! It seems like the email was legit! Thank you everyone that responded.
Hello just trying to wrap my head around a text and an email I received that I believe are scams but what’s terrifying is the amount of details they know.
I have recently ordered two items on eBay from the USA and they are shipped to Canada through DHL International shipping.
I woke up this morning two a text message from a 5 digit number that had my full name and my eBay email. The text claimed that my package has incurred duties and that I should check my email to resolve the issue.
The email arrived 8 minutes after the texts and it is expertly formatted. It really looks legit. DHL branding seems well placed and professional. Email subject is concise and contains the actual tracking number. The subject and the body are written in both English and French which makes it seem even more legit.
It even has a neat breakdown of what fees I’m meant to pay. It also says that if I don’t “pre-pay” that I “might” still receive the package and I could just ignore this.
Two things that stood out:
1. They listed the contents of the package and while they listed one of the items correctly. There is another item that eBay is shipping to me using the same tracking number but that one was not listed!!!
2. The DHL address that sent me this email is an iCloud address! The address was: "package.notification_at_dhl_com" then a random string of letters and numbers separated by underscores.
This obviously isn’t a DHL email and I understand that scammers have gotten really good at formatting emails to make them look legit. But I just can’t get over how they would know all this info?
How did they find my full name, email, home address, tracking number, order details, etc…?
I am very careful when it comes to giving out my info on the internet. Furthermore, my eBay email address is an alias that I only use for eBay and nothing else. I am pretty sure my eBay account is not hacked or anything.
My head is leaning towards the seller of the item listed in the scam email. Either he’s compromised and somehow scammers are able to steal his customer's info or he's in on it but I really doubt the latter.
I also am not fully knowledgeable on the latest ways scammers find this type of info, so any insight would be much appreciated! Thank you for reading.