🛡️ netzmeldung.com
DE
Risk: Elevated

Klimabonus phishing is back: Do not click this email link!

Category: Phishing · Published: 23/07/2026 · Last updated: 24/07/2026

Summary

What is this about? Current scam case, reported by Watchlist Internet. For details, see the linked source.
Who is affected? Consumers in Germany.
How high is the risk? Elevated

Why is this warning issued?

This warning was included because it is based on a report from Watchlist Internet. It is intended to protect other users from this scam. The assessed risk is elevated.

How the scam works

  • A fraudulent email lands in the inbox and claims to come from the Ministry of Finance.
  • Recipients are told that a Klimabonus of 290 euros is still outstanding, but that the payout has not gone through so far.
  • A link in the email leads to a fake page that imitates klimabonus.gv.at.
  • On the page, personal data and the IBAN are supposed to be entered into a form.
  • Afterwards, a selection of the user's own bank opens automatically.
  • In the next step, login credentials for online banking are supposed to be entered on a fake bank login page – giving the criminals access to the account.

How to recognise it

  • Email claims to come from the Ministry of Finance, but asks for data to be entered via a link
  • Amount changes: it is 290 euros in the email, but up to 400 euros on the linked website (this never existed with the real Klimabonus)
  • Logical contradiction: first it says the payout has already failed, then the recipient is asked to 'pre-register' again
  • Request to enter personal data and IBAN via a link from the email
  • Artificial time pressure – the email sets a deadline of only 24 hours
  • After data entry, a bank selection opens automatically – indicating the capture of online banking logins
  • Impersonal greeting and time pressure
  • Link to an external registration page

How to protect yourself

  • Do not open links from such emails or SMS – instead, type the address klimabonus.gv.at manually into the browser.
  • Never enter IBAN, account details, or online banking login credentials on pages that were accessed via a link from an email or SMS.
  • Check the sender address of the email carefully – criminals often use addresses that only at first glance look like an official authority.
  • Do not let yourself be pressured by short deadlines or time pressure.
  • Anyone who has already entered data should contact the bank immediately and change the online banking login credentials.
  • When in doubt, seek advice from the consumer advice center or the police.

What you should never do

  • Do not click the link in the email.
  • Do not enter any personal data or IBAN on the linked page.
  • Do not enter any online banking login credentials on a page opened via an email link.
  • Do not panic or act rashly because of the short deadline in the email.
  • Do not trust the supposed sender address just because it looks like an official authority.

Frequently asked questions

Do I have to apply for or pre-register for the Klimabonus?

No. For the real Klimabonus, no pre-registration or application was ever required – it was always paid out automatically. Any page that demands this is untrustworthy.

There really are still outstanding Klimabonus funds – where do I check this correctly?

Exclusively via the official page klimabonus.gv.at, which you access manually in the browser. Claims from 2022 to 2024 can still be collected there until December 2027. Never use a link from an email or SMS for this.

What happens if I simply do not respond to the email?

Nothing. As long as you do not open any link or enter any data, nothing happens. Real pressure only arises if you enter data or make payments – you should never simply pay unjustified claims.

How did the scammers get my data?

This often cannot be determined clearly. Addresses frequently come from data leaks or address brokers. However, this is no reason to comply with the demand – instead, secure evidence (screenshot of the email) and report the incident.

I have already entered data or my online banking login – what now?

Contact your bank immediately, explain the situation, and change your login credentials for online banking right away. Also secure evidence (screenshots of the email and the page). The bank is familiar with this approach and can initiate the necessary steps.

Affected data

Scam type
Phishing

Comments

No comments yet. Registered users can share their experiences.

Related warnings

Original source

Find more information in the original source.

Watchlist Internet ↗

Update history

  • 24/07/2026Description updated
  • 23/07/2026Warning added from an official source