A phishing email, four traps, three languages – When criminals work sloppily

Summary

Why is this warning issued?

This warning has been included because it is based on a report from Watchlist Internet. It is intended to protect other users from this scam. The assessed risk is elevated.

How the scam works

• Current fraud case, reported by Watchlist Internet. See linked source for details.
• Mass-sent emails or SMS messages pose as known services, shops, or authorities.
• A link leads to a fake login page that captures login credentials or payment information.
• The data is used for account takeovers, purchases billed to others, or identity theft.

How to recognise it

• Impersonal greeting and time pressure
• Link to an external login page
• Spelling or grammar errors, differing sender address

How to protect yourself

• Do not click links in unexpected messages – instead, open the page yourself in your browser.
• Never enter login credentials via email/SMS links.
• Enable two-factor authentication where possible.
• Do not react under time pressure – legitimate organizations do not push you to act immediately.
• If in doubt, contact the affected organization via the officially known phone number or website – never via contact details from the suspicious message.
• In the event of fraud, file a report with the police and inform the consumer advice centre.

Affected data

Comments

Related warnings

• Phishing-Versuch greift Login-Daten für Onlinebroker ab
• ID-Austria Phishing als Türöffner für falschen Bankanruf
• Phishing-Radar: Aktuelle Warnungen
• Phishing-Mails: Woran Sie sie erkennen und worauf Sie achten müssen
• Neue Gesundheitskarte: Betrugsversuche mit Phishing-Mails
• Betrug: Phishing-Mails und falsche SMS von Ministerien und Behörden

Original source

Update history

• 16/09/2026Warning added from an official source