🛡️ netzmeldung.com
DE
Risk: Elevated

#10DaysAgainstPhishing: No financial damage? Why the trap is still dangerous!

Category: Phishing · Published: 10/10/2026 · Last updated: 12/10/2026

Summary

What is this about? Current fraud case, reported by Watchlist Internet. See linked source for details.
Who is affected? Consumers in Germany.
How high is the risk? Elevated

Why is this warning issued?

This warning has been included because it is based on a report from Watchlist Internet. It is intended to protect other users from this fraud scheme. The assessed risk is elevated.

How the scam works

  • You encounter a phishing trap, for example through a fake hotel website or a fraudulent message.
  • You enter data, log in, or submit a 'non-binding inquiry' – the criminals collect contact data, login credentials, or ID photos.
  • The stolen information is saved and prepared for further fraud schemes.
  • Via a hacked messaging account of a friend, contacts in your circle are contacted (e.g., with the scholarship scam).
  • ID photos are used for money laundering, for example to register online bank accounts in your name, or for classifieds fraud.
  • The damage extends beyond you to your personal circle.

How to recognise it

  • Fake hotel websites that closely resemble the original and even adopt the real imprint
  • WhatsApp messages from a friend's account with unusual requests (e.g., to vote for a dance scholarship)
  • Requests for a phone number and a supposed 'confirmation code' that actually initiates account takeover
  • Demands to submit photos of ID documents such as passports or driver's licenses
  • Contact by alleged bank advisors who know unusually much about you and warn of 'imminent dangers'
  • Unsolicited ID photos from supposed prospective buyers or landlords who are allegedly abroad
  • Impersonal greeting and time pressure
  • Link to an external registration page

How to protect yourself

  • Immediately change the passwords of all affected accounts (email, online banking, social media) as soon as you have disclosed login credentials.
  • Contact the relevant service hotline if criminals have already set a new password and you no longer have access.
  • File a report with the police immediately if you have sent ID photos (passport, driver's license, national ID card) to strangers.
  • Do not accept or pass on any 'confirmation code' if it is sent to you in connection with a supposed vote or campaign.
  • Contact your bank directly using the number you know if someone contacts you as a bank advisor and knows unusually much about you.
  • Report suspicious websites and messages via the Watchlist Internet reporting form.

What you should never do

  • Do not send photos of your ID card, driver's license, or passport to people you do not know personally or whose identity has not been reliably verified.
  • Do not pass on confirmation codes delivered by SMS to third parties, even if they come from a friend's account.
  • Do not respond to unexpected messages from hacked accounts without first checking directly with the affected person.
  • Do not ignore the incident, even if no financial damage has occurred at first – stolen data is very likely to be used further.
  • Do not blindly trust alleged bank advisors who contact you by phone or message.

Frequently asked questions

Do I have to pay if my data was captured in a phishing trap?

At this initial stage, the criminals usually do not demand money yet. They collect data to use it later for further fraud. Nevertheless, you should act immediately, for example by changing passwords and, in the case of ID photos, filing a report.

Where did the criminals get my data from in the first place?

Data can come from various sources, for example through fake websites, stolen databases, or hacked accounts from your circle. The exact path is often difficult to trace in individual cases.

What should I do if I have sent ID photos to strangers?

Go to the police as soon as possible and file a report. According to sources, ID photos are almost always used for further fraud such as money laundering, and you could otherwise become the subject of investigations through no fault of your own.

How can I tell whether a friend's WhatsApp account has been hacked?

Typical signs are unusual messages with requests that do not fit the person – for example, voting for someone else, forwarding codes, or clicking on a link. When in doubt, clarify via another channel (call, in-person meeting) whether the message really came from the person.

What happens if criminals use my ID photos to open a bank account?

The account will then officially be in your name. As a result, you could become the subject of investigations through no fault of your own, because crimes such as money laundering take place in your name. Filing a report with the police immediately is therefore very important.

Affected data

Scam type
Phishing

Comments

No comments yet. Registered users can share their experiences.

Related warnings

Original source

Find more information in the original source.

Watchlist Internet ↗

Update history

  • 12/10/2026Description updated
  • 10/10/2026Warning added from an official source