Kaspersky warns of phishing scams targeting Schengen visa applicants

Kaspersky’s Global Research and Analysis Team (GReAT) has identified a phishing campaign targeting tourists planning travel to the Schengen Area. Scammers are sending fraudulent emails, appearing to represent European Union migration authorities, to individuals applying for Schengen visas.

The phishing messages claim that new border rules require all tourists to submit a digital migration declaration five working days before entry. To exploit the legitimacy of the EU’s Entry/Exit System (EES), which began operations in April 2026, the attackers direct victims to a fake website designed to mimic official EU portals using European Union imagery.

To create a sense of urgency, the emails threaten that failure to complete the declaration could result in additional border checks or temporary denial of entry. The fraudulent site requests sensitive information, including personal details, travel dates, and scans of passports. The campaign is multilingual, targeting speakers of English, Turkish, Arabic, Chinese, and Spanish. Experts warn that the stolen data could be used for further identity theft or financial fraud.