Scammers copy DAO’s design to trick customers into sharing personal details

Danish parcel service DAO is warning customers after fraudsters sent thousands of fake messages mimicking the company’s official communication channels, Danish broadcaster DR reports.

The scammers are exploiting a technical loophole that makes their messages appear in the same thread as genuine DAO notifications, particularly on iPhones. Customers receive requests to confirm their address via a link, which then prompts them to enter payment details.

DAO director Hans Peter Nissen told DR that the fraudsters are sending messages in bulk, making it inevitable that many reach actual customers. “When they place the messages in our existing thread, customers assume they’re from us,” he said.

The fake links lead to websites designed to look like DAO’s official pages, where users are asked to provide their address before being charged a fee and requested to share bank account information. Investigative media outlet TjekDet traced the domains to servers linked to China.

DAO has assigned two full-time staff to handle calls from concerned customers who believe they’ve been scammed or notice unexpected withdrawals. The company stresses it will never request payments via links.

“Once money is taken, customers should contact their bank—not us,” Nissen said.