Phishing emails from ÖGK now also in dialect
Summary
Why is this warning issued?
This warning was included because it is based on a report from Watchlist Internet. It is intended to protect other users from this scam. The assessed risk is elevated.
How the scam works
- You receive an email that appears to come from the Austrian Health Insurance Fund (ÖGK) with a dialect greeting that sounds confidential, such as 'Grüß Gott'.
- The email claims that your customer data must be updated due to legal requirements (referenced in the text as 'ÖGK-2026-X8').
- You are asked to make the update via a link in the email – the email contains a forged sender address and a fake link.
- The link leads to a deceptively realistic fake ÖGK website (e.g., 'oegk.at-kontoverwaltung.cc') that mimics the real site.
- On the fake page, you are asked to enter personal data – the criminals are particularly interested in your bank details.
- With the obtained data, the fraudsters can cause financial damage; in some cases, the link only redirects to the phishing page for a limited time to bypass security scanners.
How to recognise it
- Dialect greeting such as 'Grüß Gott' or 'Oida Diana' instead of a neutral, official salutation
- Request to update customer data or bank details via a link
- Suspicious link address such as 'oegk.at-kontoverwaltung.cc' – the real ÖGK can only be reached at 'gesundheitskasse.at'
- Artificially created time pressure by referring to an alleged legal obligation to update immediately
- Impersonal bulk addressing instead of a personal greeting with your own name
- Link temporarily leads to a harmless YouTube video instead of the phishing page (limited activation to fool security scanners)
- Impersonal salutation and time pressure
- Link to an external login page
How to protect yourself
- Do not click on links in emails that ask you to enter or update bank or customer data.
- Check the sender address and destination URL carefully: The real ÖGK can only be reached via 'gesundheitskasse.at' – anything with additional endings such as '.cc' is suspicious.
- If in doubt, call the ÖGK using the official website or phone number you know and ask whether the message is genuine.
- Save the phishing email as evidence (screenshot, forward the email) and file a report with the police.
- If you have already entered data: Contact your bank immediately, have affected cards blocked, and file a report.
- Contact the consumer advice center if you have any questions or are unsure.
What you should never do
- Do not under any circumstances click on the link in the phishing email and do not enter any data on the linked page.
- Do not pay anything and do not transfer any money on the basis of such an email.
- Do not reply to the phishing email and do not share any personal information via email.
- Do not delete the email immediately without a trace: Save it first as evidence for a possible report.
Frequently asked questions
Muss ich meine Kundendaten aktualisieren, wenn die ÖGK mir das per E-Mail sagt?
No. According to Watchlist Internet, the ÖGK does not ask you by email or SMS to update bank details via a link. Genuine authorities and health insurance funds do not request such updates in this way.
Woher haben die Betrüger meine Daten oder wissen, dass ich bei der ÖGK bin?
Phishing emails are sent out en masse and without any personal data references. The fact that you are actually insured with the ÖGK applies to a large part of the population in Austria – this is not an indication of a data leak concerning you personally.
Was passiert, wenn ich auf den Link geklickt, aber keine Daten eingegeben habe?
Simply opening the linked page is not yet a damage, but it can carry risks. Update your device, run a virus scan, and monitor your accounts. If in doubt, contact your bank or the consumer advice center.
Was soll ich tun, wenn ich bereits Bankdaten auf der gefälschten Seite eingegeben habe?
Contact your bank immediately, have affected cards blocked, secure all evidence (emails, screenshots), and file a report with the police. Additionally, contact the consumer advice center for further advice.
Wie erkenne ich, ob eine Mail wirklich von der ÖGK stammt?
Pay attention to the sender address and above all to the link destination. The real ÖGK can be reached at 'gesundheitskasse.at'. Anything with cryptic endings or typos (e.g., '.cc', hyphens with additions) is a strong warning sign. If in doubt, ask directly via the official website or by calling the ÖGK.
Affected data
Comments
No comments yet. Registered users can share their experiences.
Related warnings
- ID-Austria Phishing als Türöffner für falschen Bankanruf
- Eine Phishing-Mail, vier Fallen, drei Sprachen – Wenn Kriminelle schlampig arbeiten
- Phishing-Radar: Aktuelle Warnungen
- Phishing-Mails: Woran Sie sie erkennen und worauf Sie achten müssen
- Neue Gesundheitskarte: Betrugsversuche mit Phishing-Mails
- Betrug: Phishing-Mails und falsche SMS von Ministerien und Behörden
Original source
Find more information in the original source.
Watchlist Internet ↗Update history
- 06/08/2026Description updated
- 05/08/2026Warning added from an official source