# European phishing, scams and passwordless push > Live situation record from CLSTR: https://clstr.news/situations/tax-phishing-scams-in-europe-and-africa > Updated: 2026-08-06T14:53:35.000Z. Sources: 100. Developments: 26. In late May, Portugal’s tax authority warned of fraudulent emails mimicking IRS amendment requests, while Cabo Verde flagged a fake traffic‑fine notice; France and Spain saw tax‑refund phishing campaigns promising up to €230. June brought French banking scams centred on a €69 fake charge and a fuel‑aid phishing email offering €108.72. Authorities urged strong authentication (SécuriPass, 2FA) and password‑manager use. The French government prepared mandatory e‑invoicing for large firms and launched the 24‑hour Fraudstop hotline for card‑blocking and fraud reporting. Belgium’s Testachats survey found 86 % of respondents had encountered phishing, prompting a national reporting point. July saw Portugal’s CNCS roll out the MCiber platform for public entities and issue phishing warnings. Bitdefender promoted a summer security suite amid a surge of French data breaches, and a Prime Video scam targeted users with a €69.90 renewal lure. France announced the Bloctel do‑not‑call register would close on 11 August 2026, to be replaced by an opt‑in consent regime. From 11 August 2026, French law will ban commercial telemarketing calls unless consumers give explicit, revocable consent lasting no more than one year. Companies must retain proof of consent for three years. Violations carry fines up to €75,000 for individuals and €375,000 for firms, and contracts concluded after illegal calls will be void. Oversight is shared by DGCCRF, CNIL and ARCEP; the decree was published on 25 July 2026. The measure raised concerns in Morocco about potential job losses, while Germany has operated a similar consent‑based ban since 2009. Belgian banks lowered daily transfer limits to €5,000, added a four‑hour cooling‑down before limit increases, and integrated itsme facial verification. Portugal’s Social Security and energy provider EDP warned of sophisticated SMS and door‑to‑door phishing attempts. ## Claims - From 11 August 2026 commercial telephone solicitations in France are prohibited unless prior consumer consent is obtained. (corroborated by 10 sources) - The required consent must be free, specific, informed, unambiguous and revocable, and may be valid for at most one year. (corroborated by 10 sources) - The Bloctel opposition list will be discontinued on 11 August 2026. (corroborated by 10 sources) - The decree implementing the rule (n° 2026‑662) was published on 25 July 2026 in the Journal officiel. (corroborated by 10 sources) - Fines for companies can reach €375,000 per illegal call; fines for individuals can reach €75,000. (corroborated by 3 sources) - About three‑quarters of French people receive at least one unsolicited sales call each week. (corroborated by 2 sources) - Morocco fears that 40,000‑50,000 call‑center jobs could be lost because of the French ban. (corroborated by 2 sources) - Germany has had a similar ban on unsolicited telemarketing calls since 2009. (corroborated by 2 sources) ## Timeline ### 2026-08-06: France enacts ban on cold‑calling telemarketing from August 11 From 11 August, France bans cold‑calling without prior consent, allowing only calls linked to existing contracts and imposing fines up to €75k for individuals and €375k for companies. 9 sources. https://clstr.news/cluster/france-enacts-ban-on-coldcalling-telemarketing-from-august-11 ### 2026-08-04: France bans unsolicited telemarketing calls from Aug 11, 2026 France will ban unsolicited telemarketing calls from 11 Aug 2026, requiring prior consent, imposing fines up to €375k, ending Bloctel, and sparking job‑loss fears in Morocco. 13 sources. https://clstr.news/cluster/france-to-ban-unsolicited-cold-calls-from-august-2026-under-new-optin-rules ### 2026-07-30: France to End Bloctel, New Consent Rule for Telemarketing Takes Effect Aug 11 2026 France will shut Bloctel on 11 Aug 2026, making telemarketing illegal without explicit consumer consent; limited exceptions apply for existing contracts. 7 sources. https://clstr.news/cluster/france-to-end-bloctel-new-consent-rule-for-telemarketing-takes-effect-aug-11-2026 ### 2026-07-25: France bans telemarketing calls without prior consent from August 2026 From 11 August 2026 France will ban commercial phone calls without explicit consumer consent, ending Bloctel, imposing fines up to €375k and voiding contracts from unlawful calls. 15 sources. https://clstr.news/cluster/france-bans-coldcall-sales-without-prior-consumer-consent-from-aug-11 ### 2026-07-20: Passwordless Authentication Advances with Passkeys and QR/WPS Passkeys and QR/WPS enable passwordless logins for accounts and Wi‑Fi, improving security and user convenience. 3 sources. https://clstr.news/cluster/passwordless-authentication-advances-with-passkeys-and-qrwps ### 2026-07-19: Amazon France warns of fraudulent charges and phishing emails Amazon France alerts users to “AMZ Digital FRA” subscription charges and a wave of phishing emails that impersonate the retailer, urging verification of accounts and avoidance of suspicious links. 2 sources. https://clstr.news/cluster/amazon-france-warns-of-fraudulent-charges-and-phishing-emails ### 2026-07-18: Password Management Advice Highlights Organization Tips and New Breach‑Checking Strength Tool Guidelines advise organized password storage, while a new checker uses breach data and AI to replace weak complexity rules. 2 sources. https://clstr.news/cluster/password-management-advice-highlights-organization-tips-and-new-breachchecking-strength-tool ### 2026-07-18: Portugal warns of new phishing scams impersonating Social Security and EDP Portugal's Social Security and utility EDP warned of sophisticated phishing scams that fake official messages and use real data, urging citizens to avoid links, verify contacts, and report fraud. 8 sources. https://clstr.news/cluster/portugal-warns-of-new-phishing-scams-impersonating-social-security-and-edp ### 2026-07-14: Passkeys and Strong Password Practices Urged as New Online Security Standards Experts recommend adopting passkeys and avoiding password reuse, urging biometric logins, unique passwords, password managers, and 2FA to strengthen online security. 2 sources. https://clstr.news/cluster/passkeys-and-strong-password-practices-urged-as-new-online-security-standards ### 2026-07-14: Belgian banks and itsme app tighten security to curb phishing Belgian banks will lower transfer limits and add waiting periods, while itsme app will require facial ID checks, both to combat rising phishing and online fraud in Belgium. 2 sources. https://clstr.news/cluster/belgian-banks-and-itsme-app-tighten-security-to-curb-phishing ### 2026-07-08: Belgium banks to lower transfer limits and add cooling periods to fight fraud Belgium’s consumer‑protection minister and banks will lower daily transfer limits to €5,000, add a four‑hour waiting period for limit increases, and introduce new fraud‑prevention tools to tackle rising online‑ 3 sources. https://clstr.news/cluster/belgium-banks-to-lower-transfer-limits-and-add-cooling-periods-to-fight-fraud ### 2026-07-07: France to end Bloctel service as 2025 law bans cold‑call marketing France’s Bloctel list for blocking spam calls ends on 11 August as a 2025 law bans cold‑call telemarketing; the Saracroche app offers an alternative blocker for millions of numbers. 2 sources. https://clstr.news/cluster/france-to-end-bloctel-service-as-2025-law-bans-coldcall-marketing ### 2026-07-06: France targets Prime Video users with large-scale phishing scam A phishing scam in France is impersonating Amazon Prime Video, using fake renewal notices and IBANs to steal login and banking details; users should avoid email links and log in directly. 2 sources. https://clstr.news/cluster/france-targets-prime-video-users-with-large-scale-phishing-scam ### 2026-07-06: Bitdefender boosts summer security suite as data breaches surge in France Bitdefender promotes summer multi‑device security and dark‑web breach alerts as French data breaches affecting millions rise. 2 sources. https://clstr.news/cluster/bitdefender-boosts-summer-security-suite-as-data-breaches-surge-in-france ### 2026-07-01: Belgium introduces central Fraudstop hotline and guidance on unpaid telecom bills Belgium launches a 24/7 Fraudstop hotline to streamline reporting of online banking scams, and telecom providers outline steps for unpaid bills, including reminders, minimum service, and possible contract loss. 2 sources. https://clstr.news/cluster/belgium-introduces-central-fraudstop-hotline-and-guidance-on-unpaid-telecom-bills ### 2026-06-27: French Constitutional Court Invalidates Key Provisions of Telephone Solicitation Law France's Constitutional Council struck down parts of the 2020 telemarketing law; a new consent‑required law will ban unauthorized calls from August 2026, listing specific illegal prefixes. 3 sources. https://clstr.news/cluster/french-constitutional-court-invalidates-key-provisions-of-telephone-solicitation-law ### 2026-06-25: French Court Strikes Down Parts of Telemarketing Law Amid Rising Phone Scams France's Constitutional Council invalidated parts of the 2020 telemarketing law, while regulators warn of growing phone and data‑breach scams targeting consumers. 11 sources. https://clstr.news/cluster/french-regulators-warn-of-dataleak-and-spoofing-scams-targeting-victims ### 2026-06-24: France tax refund scam lures taxpayers with €219 phishing lure A phishing scam in France is sending emails and texts promising a €219 tax refund for 2025, urging victims to click fraudulent links; authorities warn and advise verifying through the official tax portal. 4 sources. https://clstr.news/cluster/france-tax-refund-scam-lures-taxpayers-with-219-phishing-lure ### 2026-06-23: Portugal's CNCS rolls out MCiber registration platform and alerts on phishing scams Portugal's CNCS introduced the mandatory MCiber platform for cybersecurity compliance and warned of phishing emails impersonating the agency that deliver malware. 2 sources. https://clstr.news/cluster/portugals-cncs-rolls-out-mciber-registration-platform-and-alerts-on-phishing-scams ### 2026-06-21: French cybersecurity advisories stress 2FA adoption and email address risks French security alerts urge 2FA use—prefer apps or hardware keys—and warn that email addresses stolen in breaches like France Travail and Free fuel phishing attacks. 2 sources. https://clstr.news/cluster/french-cybersecurity-advisories-stress-2fa-adoption-and-email-address-risks ### 2026-06-21: France and Belgium confront rising phishing scams and roll out new fraud‑reporting tools France mandates bank reimbursements for unauthorized payments and prepares e‑invoicing, warning of new fraud risks, while Belgium sees a phishing surge, proposes a single reporting hub, and rolls out the 24‑h ‘ 6 sources. https://clstr.news/cluster/french-banks-must-reimburse-victims-of-phishing-scams-under-consumer-protection-law ### 2026-06-19: French bank customers advised to adopt stronger online security measures French banking users are urged to use manual URL entry, verify HTTPS, adopt SecuriPass, and employ a password manager like NordPass to combat rising phishing and data‑breach threats. 3 sources. https://clstr.news/cluster/french-bank-customers-advised-to-adopt-stronger-online-security-measures ### 2026-06-17: Fake 69‑euro levy and fuel‑aid phishing emails target French users Fraudulent French emails mimic a €69 subscription charge and a €108.72 fuel‑aid offer, using real personal data to steal banking details; phishing reports rose 159 % in 2024‑25, costing €245 million. 3 sources. https://clstr.news/cluster/fake-69euro-levy-and-fuelaid-phishing-emails-target-french-users ### 2026-06-16: French banking customers face wave of phishing scams and fake 69‑euro charges French consumers are hit by phishing scams that mimic bank notifications and levy a fake €69 charge; banks advise using official apps, activating strong authentication, and avoiding links or phone calls. 2 sources. https://clstr.news/cluster/french-banking-customers-face-wave-of-phishing-scams-and-fake-69euro-charges ### 2026-05-31: Tax refund phishing scams sweep France and Spain Phishing scams impersonating France’s tax and welfare agencies and Spain’s tax authority send fake refund messages via SMS or email, tricking users into revealing personal and banking details; officials urge to 2 sources. https://clstr.news/cluster/tax-refund-phishing-scams-sweep-france-and-spain ### 2026-05-29: Portugal tax authority and Cabo Verde service warn of phishing scams Portugal's tax authority and Cabo Verde's Casa do Cidadão warn of phishing emails impersonating official notices and urge citizens to avoid clicking fraudulent links. 4 sources. https://clstr.news/cluster/portugal-tax-authority-and-cabo-verde-service-warn-of-phishing-scams --- Cite as: European phishing, scams and passwordless push. CLSTR, https://clstr.news/situations/tax-phishing-scams-in-europe-and-africa