Fraud: Phishing emails and fake SMS from ministries and authorities
Summary
Why is this warning issued?
This warning has been included because it is based on a report from Verbraucherzentrale – Phishing Radar. It is intended to protect other users from this scam. The assessed risk level is elevated.
How the scam works
- Criminals send out mass emails or SMS that visually look like official authority letters.
- They pose as ministries, authorities, or government agencies.
- In the current case, they claim, for example, that the German federal government would pay out a "special climate payment".
- The message contains a link that leads to a fake website.
- On this fake site, recipients are asked to enter personal data, account details, or login credentials.
- Using the stolen data, the criminals steal money or misuse the victims' identities.
How to recognise it
- Message claims to come from an authority, ministry, or government agency – often with a highly official-looking presentation
- Promise of a (special) payment or sum of money, e.g., an alleged "special climate payment" from the federal government
- Message contains a link leading to a fake website that looks deceptively similar to a real authority site
- Request to enter or confirm personal data, account, or login details
- Time pressure or threatened consequences if one does not respond immediately
- Sender address or SMS sender does not match the real authority (typos, cryptic characters, unusual domain)
- Impersonal greeting and time pressure
- Link to an external login page
How to protect yourself
- Do not click on links in unsolicited emails or SMS, even if they look official.
- If in doubt, contact the authority using an official phone number or website you know – do not enter any data via the link in the message.
- Do not reply to suspicious emails or SMS and delete them.
- Forward suspicious phishing emails to [email protected] (or to the Phishing Radar of your local consumer protection center) and report the incident.
- Preserve evidence (screenshot of the message, sender, link address) before deleting the email.
- If you have already entered data: inform your bank immediately, change your login credentials, and file a report with the police if necessary.
What you should never do
- Do not click on the link in the message and do not visit the site.
- Do not enter any personal data, account, banking, or login details on the linked site.
- Do not transfer money or pay any alleged fees – real authorities do not request payments via email or SMS links.
- Do not reply to the message and do not open any attachments.
- Do not assume without checking that the message is genuine just because it looks legitimate.
Frequently asked questions
Do I have to pay the demand or provide the data?
No. Real authorities and ministries do not request payments or personal data via a link in an email or SMS. Ignore the message.
What happens if I don't respond?
Usually nothing happens. If there is indeed a genuine claim, it will come through official channels – by letter or via your government account – and never only via SMS or email with a link.
Where did the scammers get my data or address?
The data often comes from data leaks, hacked databases, or is sent out randomly to many recipients. Receiving a message does not mean that the authority itself has shared your data.
I have already entered data – what now?
Change the affected login credentials immediately, inform your bank, monitor your accounts, and file a report with the police. Also seek advice from your local consumer protection center.
How can I tell whether an authority email is genuine?
Real authorities generally do not send unsolicited emails or SMS with links for entering data. If in doubt, check the sender address carefully and contact the authority via its official website or known phone number.
Affected data
Comments
No comments yet. Registered users can share their experiences.
Related warnings
- Klimabonus-Phishing ist zurück: Klicken Sie nicht auf diesen Mail-Link!
- Phishing-Radar: Aktuelle Warnungen
- Phishing-Mails: Woran Sie sie erkennen und worauf Sie achten müssen
- Neue Gesundheitskarte: Betrugsversuche mit Phishing-Mails
- Phishing-Mails zur Datenbestätigung
- Raiffeisen Phishingmail fordert zur pushTAN-Aktivierung auf
Original source
Find more information in the original source.
Verbraucherzentrale – Phishing-Radar ↗Update history
- 22/07/2026Description updated
- 13/07/2026Warning added from an official source