Sending your passport by DHL to Madrid

We have recently sent our passports to Madrid via DHL. The same day the payment was taken from our bank account we received an email supposedly from DHL saying:-

Subject: DHL Tracking Number J1X3M45M
Hello!
The courier company was not able to deliver your parcel by your address.
You may pickup the parcel at our post office personaly.
The shipping label is attached to this e-mail.
Please print this label to get this package at our post office.
Thank you for attention.
DHL Delivery Services.

The attachment was a zip file containing a virus. Having contacted the Embassy about it, they contacted DHL. The reply was:-

DHL have responded to my query. They are aware that this has happened a few times recently and have their IT people investigating. The email would have been generated from an IT system independent of the British Consulate-General system. As I mentioned in my previous email, this email was generated before your application was entered on the DHL system at the Consulate-General.

I can only suggest that you do not enter your email address on the DHL form.