~/home / scam-radar
Scam radar
Current phishing emails, fake texts and scam calls in plain words: how to spot them and what to do now. Updated daily.
Got a message and not sure?
Paste the text into the scam check: you get an assessment in seconds, no sign-up, and nothing is stored.
Fake “data update 2027” e-mail: a made-up register check aimed at companies
A supposed register check is meant to lure companies to a suspicious website. The Austrian Federal Economic Chamber (WKO) warns about this current e-mail. Business owners should never handle mail from a “register” through links in the message.
What to do: Do not open the link. Type the real authority website yourself or ask the chamber when in doubt.
Large network of fake flight-booking sites uncovered
The sites lure people with rock-bottom prices and easy booking. They advertise on Facebook and Instagram and hide behind the names of real travel companies and airlines. Watchlist Internet has examined a wide network of such sites.
What to do: Book flights only directly with the airline or well-known portals. For cheap offers from ads, check the provider and legal notice.
A supposed ÖGK phishing warning is itself a phishing trap
The Austrian health insurer ÖGK is often used as a cover for fraud, and warnings about it appear weekly. Criminals now exploit exactly that: they send their own “warning” that really leads into a phishing trap.
What to do: Even warning e-mails are suspicious if they contain a “check now” link. Read information only on the insurer's real website.
The flat advert as a way in for malware
The housing market is tight, and anyone who finds an affordable flat wants to be quick: contact, viewing, signature. Fraudsters target exactly that rush and use flat adverts to spread malware.
What to do: Do not open files or programs from unknown landlords, not even a “lease” or “floor plan” attachment.
Mediamarkt as bait: fake shops and “discounted cancelled-order devices”
Criminals use the name of the electronics retailer Mediamarkt for several scams at once. Besides fake shops, they also send offers for supposedly discounted devices from cancelled orders.
What to do: Order only in the known shop by typing the address yourself. Walk away from prepayment to private persons or instant-payment demands.
“Your Amazon Prime trial ends in 72 hours”: phishing trap
The sender name looks trustworthy, the graphics official and the tone friendly. Supposedly the Prime trial ends in 72 hours and then turns into a two-year subscription. To prevent that you are told to open a link: that is the trap.
What to do: Check subscriptions only in the Amazon app or on the website itself, never via a link in an e-mail.
Real number, fake caller: how spoofing works
A call from a bank employee, an e-mail from the insurer or a text from a ministry: familiar sender details feel safe. But what the display shows does not have to be true. A technique called spoofing makes that possible.
What to do: For a call from “the bank”, hang up and call back the number from your card or the website yourself. Never give out a TAN or codes.
How do criminals know so much about me? Social engineering explained
“This is your bank, we have noticed a suspicious transfer”: the caller knows your name and even your account number, which sounds convincing at first. Watchlist Internet explains why criminals can know so much and how social engineering works.
What to do: Knowing your name and account number proves nothing. If in doubt, hang up and call the bank yourself.
Check in 5 seconds: the 5 warning signs
- Time pressure or threats: “account blocked”, “final notice”, “delivery failed”.
- You are asked to tap a link, install an app or enter data.
- The sender does not fit: different domain, odd number, spelling mistakes.
- It is about money, passwords, TANs or codes. Banks never ask for those by e-mail, text or phone.
- It sounds too good to be true: a prize, a refund, guaranteed crypto profit.
If in doubt: tap nothing, do not call back the number in the message, open the official app or website yourself. Already clicked or entered data? Change the password at once, call your bank, have the card blocked and report it to the police.
Warnings are selected automatically from public warning pages: a short excerpt with a link to the source; translations and tips partly written with AI. Please report mistakes, entries are withdrawn when needed. Not legal advice.