A1 Phishing: Fake Emails in Circulation

Summary

Why is this warning issued?

This warning was included because it is based on a report from Watchlist Internet. It is intended to protect other users from this scam. The classified risk level is elevated.

How the scam works

• Criminals send mass emails in the name of A1 with logo, colors, and matching design.
• Two variants are sent: one to private customers (allegedly expired direct debit authorization) and one to business customers (allegedly required webmail verification).
• The email creates stress through threats such as impending account suspension or processing issues with invoices.
• You are asked to confirm or update your account or login details via a link.
• The link leads to a fake A1 website that imitates the real page.
• There you enter your data and the criminals steal it.

How to recognise it

• The displayed sender name (e.g., 'A1 Service Team') does not match the actual sender address
• Threats with time pressure, e.g., 'Without confirmation within 48 hours, access will be restricted'
• Impersonal greetings such as 'Dear customer' or 'Dear A1 Business customer'
• The link does not lead to the real A1 page, but e.g., to 'A1.net/daten-aktualisieren-information' or 'businesswebmail.a1.net/verify' – these are fake addresses
• You are asked to update or confirm account details, payment information, or login credentials via a link
• Reasons such as 'expired direct debit authorization' or 'GDPR guidelines' are used as a pretext
• Impersonal greeting and time pressure
• Link to an external login page

How to protect yourself

• Always check the full sender address, not just the displayed name. Official A1 addresses end, for example, in @a1.net or @a1business.at.
• Do not click on links in suspicious emails; instead, open the A1 website manually in your browser.
• If in doubt, contact A1 directly using the contact details on the official website.
• Forward suspicious emails to [email protected] and move them to the spam folder.
• If you have clicked the link or entered data: change your A1 password immediately.
• If you have entered bank or credit card details: inform your bank or credit card company immediately.

What you should never do

• Do not click on links in the email.
• Do not enter any personal data, bank details, or login credentials on the linked page.
• Do not let yourself be put under time pressure – even if a 48-hour deadline is mentioned.
• Do not rely solely on the displayed sender name.
• Do not pay any demanded amounts without having verified the claim through official A1 channels.

Frequently asked questions

Affected data

Comments

Related warnings

• Phishing-Mails der ÖGK jetzt auch im Dialekt
• „Sie haben eine neue Nachricht“: Phishing-Falle im Namen der easybank
• Phishing-Welle im Namen des Finanzministeriums nutzt Familienbeihilfe als Köder
• Phishing-Radar: Aktuelle Warnungen
• Phishing-Mails: Woran Sie sie erkennen und worauf Sie achten müssen
• Neue Gesundheitskarte: Betrugsversuche mit Phishing-Mails

Original source

Update history

• 23/08/2026Description updated
• 21/08/2026Warning added from an official source