Risk: Elevated

#10DaysAgainstPhishing: Never click! Always log in yourself!

Category: Phishing · Published: 10/10/2026 · Last updated: 11/10/2026

Summary

What is this about? Current fraud case, reported by Watchlist Internet. See linked source for details.

Who is affected? Consumers in Germany.

How high is the risk? Elevated

Why is this warning issued?

This warning was included because it is based on a report from Watchlist Internet. It is intended to protect other users from this scam. The assessed risk is elevated.

How the scam works

Criminals send messages (e.g. SMS) indiscriminately to many recipients.
The messages use negative triggers (e.g. threatened account suspension, expiring registration) or positive triggers (e.g. supposed refund) to create pressure or curiosity.
The message contains a link leading to a fake website that looks deceptively similar to the real site.
On the fake site, victims are asked to enter personal data and login credentials.
Using the stolen login credentials, the perpetrators gain access to their victims' accounts.
The stolen data is used for further scams – for instance, by posing as bank advisors claiming to recover lost money or fend off account attacks.

How to recognise it

Message (e.g. SMS) warns about the expiration of the ID-Austria registration and contains a link for data verification
Message promises a supposed refund from the Österreichische Gesundheitskasse (ÖGK) and asks for confirmation via a link
The message contains a link leading to a fake page modeled on the real website
On the linked page, personal data or login credentials are requested
The message provides a phone number that does not come from the provider's official site
Impersonal greeting and time pressure
Link to an external login page
Spelling or grammar errors, unusual sender address

How to protect yourself

Never click on links in messages; instead, always log in directly yourself on the provider's official site and check your profile or inbox there.
If there is no warning, no indication of an expiring registration, an undelivered parcel, or a payout there, it is phishing.
If in doubt, call the provider's service hotline via the official website – never use a number from the suspicious message.
If you have already entered data: change your password immediately (if still possible), contact your bank's or credit card provider's customer service, and describe the situation.
Monitor your account closely over the next few days and report any unusual activity to your bank immediately.
Report phishing attempts via official reporting forms (e.g. Watchlist Internet) to protect others.

What you should never do

Do not click on links in unsolicited messages – no matter how legitimate they seem.
Never call phone numbers provided in the suspicious message itself.
Do not enter any personal data, login credentials, or credit card details on a linked page.
Do not respond to supposed bank advisors who contact you after you have entered data in a phishing scheme, and do not transfer any money.
Do not ignore the incident if you have already entered data – act immediately.

Frequently asked questions

Where did the fraudsters get my mobile number or email address?

This generally cannot be traced precisely. Data often circulates via data breaches, illegal data brokers, or through indiscriminate mass mailing to randomly generated numbers.

How can I tell whether the message is genuine?

Genuine providers will never ask you, via a link in an SMS/email, to enter sensitive data. Always log in directly via the official site and check whether a corresponding notification is available there. If in doubt, call the official hotline.

I have already clicked the link and entered data – what should I do?

Change the password of the affected account immediately, contact your bank's or credit card provider's customer service, describe the incident, and monitor your account closely over the next few days. If necessary, an account freeze may be advisable.

Do I have to make a requested payment?

No. You should never pay unjustified demands from phishing messages. Instead, contact your bank or a consumer advice center.

Who can help me if I am unsure?

Contact the affected provider's official service hotline (look it up on the real website, not from the message) or a consumer advice center. If damage has already occurred, filing a police report may also be advisable.

Affected data

Scam type

Phishing

Comments

No comments yet. Registered users can share their experiences.

Related warnings

Original source

Find more information in the original source.

Watchlist Internet ↗

Update history

11/10/2026Description updated
10/10/2026Warning added from an official source