Risk: Elevated

easybank Phishing: "Former Barclays customers are asked to confirm their data!"

Category: Phishing · Published: 02/10/2026 · Last updated: 04/10/2026

Summary

What is this about? Current fraud case, reported by Watchlist Internet. See linked source for details.

Who is affected? Consumers in Germany.

How high is the risk? Elevated

Why is this warning issued?

This warning has been included because it is based on a report from Watchlist Internet. It is intended to protect other users from this scam method. The assessed risk is elevated.

How the scam works

Criminals send phishing emails in the name of easybank to former Barclays customers in Germany.
They use the real background (the takeover of Barclays by BAWAG Group and the rebranding to easybank) to make the message appear plausible.
They ask recipients to 'confirm' their profile data via a link embedded in the email – with reference to alleged 2026 KYC guidelines.
They set a deadline and issue a threat (confirm data by 11 July 2026 or lose card functionality) to force quick action without verification.
The link leads to a fake portal modelled on the genuine easybank website.
There, personal details (name, address, phone number) and ultimately online banking login credentials are requested.
With the stolen data, the criminals gain access to the account and can later carry out further fraud (e.g. a 'recovery scam' offering supposed help to recover funds).

How to recognise it

The sender address ([email protected]) has nothing to do with easybank, even though the sender name is 'easybank'.
Banks never request data or logins via a link in an email – important documents are placed in the personal inbox of the online banking system.
The domain of the alleged verification portal does not belong to easybank.
Short deadlines put recipients under pressure (e.g. confirmation by 11 July 2026 to comply with alleged 2026 KYC guidelines).
If you do not respond, the criminals threaten the loss of card functionality.
You are asked to log in directly with your online banking credentials on the fake portal.
Impersonal greeting and time pressure
Link to an external login page

How to protect yourself

Contact your bank immediately and describe the situation – the experts will know what to do.
If still possible, change your online banking password right away.
Monitor your account particularly closely over the coming period and report any unusual activity immediately.
Stay alert: the criminals have your contact details and could contact you again later with a different scam (e.g. a recovery scam).
Preserve evidence (a screenshot of the email with the sender address, without clicking the link) and, if needed, contact the consumer advice centre or the police.

What you should never do

Do not click the link in the email and do not open any attachments.
Do not enter any personal data, and especially no online banking login credentials, on the linked page.
Do not let yourself be pressured by the deadline (11 July 2026) or the threat of losing card functionality – real banks communicate important steps via the inbox within online banking.
Do not reply to the phishing email and do not pay any 'fees' or 'confirmation amounts'.
If asked, do not provide data over the phone without verification just because someone claims to be from the bank – call your bank back using the official number you know.

Frequently asked questions

Do I need to confirm my data because Barclays has become easybank?

A real bank would never ask you to enter data via a link in an email. If any updates are actually required, you would be informed via the personal inbox of your online banking. If in doubt, call easybank using their official number you know and ask.

Where did the fraudsters get my data?

This cannot be determined with certainty. Possible sources include previous data leaks, data from the old Barclays customer base, or simply a mass mailing to many former customers. You will only know for sure after a review by your bank or the consumer advice centre.

What happens if I do not respond to the email?

In most cases, nothing happens – the deadline and the threat of losing card functionality are part of the scam to make you click without thinking. Instead, check via the official route (online banking or the bank hotline) whether any action is actually required.

I have already clicked the link and entered data – what now?

Contact your bank immediately, describe the situation, change your online banking password if still possible, and monitor your account closely. If you notice any unusual activity, inform the bank again straight away and, if necessary, file a report with the police.

Will the fraudsters contact me again?

Unfortunately, that is possible. Stolen personal data often leads to further scams, e.g. a 'recovery scam' in which criminals later pose as helpers offering to recover alleged losses. Be especially cautious with unexpected calls or messages that know your personal data.

Affected data

Scam type

Phishing

Comments

No comments yet. Registered users can share their experiences.

Related warnings

Original source

Find more information in the original source.

Watchlist Internet ↗

Update history

04/10/2026Description updated
02/10/2026Warning added from an official source