[REVISION HISTORY]

German consumer fraud and phishing warnings

Updated 12 times since CLSTR started tracking revisions of this situation.

What changed

2026-08-31 08:47 UTC → 2026-09-01 00:05 UTC · added ~~removed~~

Since late July 2026, German authorities have warned of a wave of phishing emails masquerading as Sparkasse communications, using threats of account blockage to steal credentials. By mid-August, fraudulent activity expanded to include Deutsche Bank ‘quishing’ tactics involving manipulated QR codes in physical letters, as well as deceptive Microsoft Teams notifications designed to steal corporate credentials. On 23 August 2026, a new phishing campaign emerged targeting taxpayers by impersonating the ELSTER tax portal. These fraudulent emails often use the subject line ‘Ihr Steuerbescheid 2025 – Erstattung bestätigt’ to lure victims with the promise of a tax refund. The scam employs the official ELSTER logo and creates a sense of urgency through strict deadlines to facilitate a fake identity verification process. The Saarland Ministry of Finance has noted that the official Elster service never requests online banking connections or sensitive information like PINs via email. By 31 August 2026, the scope of fraud expanded further. The Deutsche Rentenversicherung issued an alert regarding scammers using manipulated videos and fake communications to demand ‘proof of life’ from pension recipients via SMS, email, or calls. Additionally, fraudulent investment platforms have been observed mimicking news outlets like Tagesschau to solicit deposits. The Verbraucherzentrale has also warned of WhatsApp phishing messages threatening immediate account deactivation within 24 hours. ~~Experts note that the use of artificial intelligence is making social engineering attacks more professional. According~~ In addition to ~~Allianz Trade, damages from social engineering scams rose by 60 percent~~ these German trends, authorities in ~~2025, including ‘fake president’ fraud~~ Italy and Austria have reported related activity. The Polizia di Stato identified ‘zero-click’ WhatsApp attacks in Italy, where ~~criminals impersonate executives~~ hijacked accounts send fraudulent money requests to ~~authorize unauthorized transfers.~~ contacts. In Austria, scammers are impersonating the Austrian Health Insurance Fund (ÖGK) with messages promising specific refunds to steal banking credentials. In Konstanz, Germany, police reported a fraud case involving a fake bank letter with a QR code and spoofed phone calls.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.