Phishing scams targeting German consumers

A series of phishing campaigns has been identified targeting various consumers and financial institutions in Germany.

Initial reports highlighted a scam impersonating the discount retailer Lidl. Fraudulent emails promised free grocery packages worth nearly 50 euros to entice recipients into completing surveys and paying small delivery fees. These attempts were designed to facilitate identity theft by stealing personal and banking information. Scammers often use professional-looking logos and sender names like ‘Lidl Customer Satisfaction’ to mask unrelated domains.

Subsequent campaigns expanded to target customers of Deutsche Kreditbank (DKB) and PayPal. The DKB scam utilized high-pressure tactics, claiming accounts were not updated and threatening access restrictions within 72 hours. Similarly, PayPal users received messages claiming accounts were under review, with threats of account deletion within 24 hours if credentials were not confirmed via malicious links.

More recent developments show an increase in sophistication, with some campaigns utilizing artificial intelligence to mimic official communication styles. The Deutsche Rentenversicherung (DRV) has reported fraudulent emails using the agency’s logo and AI-generated language to request sensitive data. Additionally, the ADAC has warned members of fake newsletters and fraudulent vehicle offers, while Mobile.de dealers have been targeted with counterfeit invoices.

In response to these threats, a European Court of Justice (ECJ) ruling clarified that banks must generally reimburse customers for unauthorized transfers by the next business day, even in cases of gross negligence, though banks may reclaim funds under specific conditions. Meanwhile, research suggests a risk perception gap, noting that 33 percent of 18-to-29-year-olds believe they are immune to online fraud.