#10DaysAgainstPhishing: Why phishing traps always work with pressure
Summary
Why is this warning issued?
This warning has been included because it is based on a report from Watchlist Internet. It is intended to protect other users from this scam. The assessed risk is elevated.
How the scam works
- Criminals send messages via email, SMS or phone calls that appear to come from banks, authorities or well-known companies.
- Pressure is applied: a specific action must be taken within a narrow time window.
- If not complied with, harsh consequences are threatened, such as account suspension, loss of cloud content, seizure or arrest.
- Alternatively, positive pressure is created, for example through alleged tax refunds or payouts from a health insurance company.
- Victims are directed to fake websites or, on the phone, persuaded to disclose sensitive data.
- The stolen data is used to prepare further scams or to trigger direct transfers.
How to recognise it
- Urgent request to act immediately, often with a narrow time window
- Threat of harsh consequences such as account suspension, data loss, seizure or arrest
- Unexpected messages or calls allegedly from banks, authorities or Microsoft
- Request to disclose personal data, login credentials or payment information
- Promise of a refund or payout that requires quick clicking
- On the phone: request for an immediate transfer, joint remote PC maintenance, or disclosure of bank details
- Impersonal greeting and time pressure
- Link to an external login page
How to protect yourself
- Pause and analyze the message calmly – nothing is so urgent that it cannot wait a few hours.
- Verify through an independent channel: call the official service hotline, log in directly with the provider, or use the official parcel tracking.
- Never click on links in the suspicious message and do not call back the phone number provided.
- Simply hang up on unexpected calls (alleged bank advisors, Microsoft employees, hospital staff).
- Change any passwords already entered immediately, inform the bank or payment service provider, and monitor the account.
- File a report with the police, especially if copies of your ID have been transmitted.
What you should never do
- Do not react hastily to demands or disclose sensitive data such as passwords, PIN or TAN.
- Do not click on links in the suspicious message or use the phone number provided.
- Do not pay allegedly due fees, fines or customs charges under pressure.
- Do not allow remote access to your computer on the phone or have software installed.
- Do not simply ignore the phishing message if data has already been disclosed – instead, act quickly.
Frequently asked questions
Do I have to pay if threats of seizure or arrest are made?
No. Real authorities or bailiffs do not threaten immediate arrest by email, SMS or phone. Verify the demand through official channels and, if in doubt, contact the police or a consumer advice centre.
What should I do if I clicked on the link and entered data?
Change the affected password immediately, inform your bank or payment service provider, and monitor your account. File a report with the police, especially if you have submitted copies of your ID. Criminals may try to contact you with further scams.
How did the scammers get my data?
Data often comes from previous data breaches, stolen address lists, or earlier phishing waves. Anyone who has fallen into a trap should expect to be contacted again.
How can I tell whether a call actually comes from my bank?
Reputable banks do not ask for confidential data such as PIN or TAN on the phone and do not pressure you into immediate transfers. If in doubt, hang up and call the bank yourself using the official number on your card or website.
Who can I contact if I suspect something?
You can contact the consumer advice centre in your federal state, inform the police, or report suspicious messages via the reporting form on Watchlist Internet.
Affected data
Comments
No comments yet. Registered users can share their experiences.
Related warnings
- Betrug in zwei Akten: Die nächste Runde im Klimabonus-Phishing
- Pensionsleistung genehmigt: 723-Euro-Versprechen ist Phishing
- #10TageGegenPhishing: Niemals klicken! Immer selbst einloggen!
- #10TageGegenPhishing: KI-gestützte Betrugsversuche erkennen
- #10TageGegenPhishing: Quishing – Wenn QR-Codes zur Betrugsfalle werden
- #10TageGegenPhishing: Wie geht man mit verdächtigen E-Mail-Anhängen um?
Original source
Find more information in the original source.
Watchlist Internet ↗Update history
- 11/10/2026Description updated
- 10/10/2026Warning added from an official source