In Germany, scammers are extracting money and personal data through letters, SMS, fake QR codes, phone calls, and rental advertisements. As with the fake BankID, the message may lead to a page that mimics a familiar service. For the schemes to watch out for in November 2026, writes Ausnews.
What schemes are used by scammers in Germany in November 2026
-
Phishing emails. On behalf of a bank or payment service, they ask you to update your information or confirm your login via a link.
-
SMS from a supposed delivery service. They ask you to confirm your address or pay a small amount for the package. The payment page may collect your card details.
-
Fake QR codes. Scammers can stick their code over a genuine one at a parking meter or charging station. After scanning, a fake payment page opens.
-
Calls with number spoofing. The caller claims to be a bank employee, a police officer, or a relative and asks for a code or to urgently transfer money.
-
Fake rental listings. They request a deposit for an apartment before viewing. Hurry and the demand for prepayment also occur in fake job ads.
How to recognize phishing and what to do if you have already entered your data
German consumer protection centers advise paying attention to the following signs:
-
Unusual language or mistakes. For example, the bank suddenly writes in a language it has not communicated with you before.
-
Impersonal address. The phrase «Dear customer» can be a signal. Your name in the letter does not confirm its authenticity either.
-
Pressure and threats. They demand immediate action, otherwise, they claim your card or account will be blocked.
-
Request for secret data. They ask you to provide your PIN, password, or one-time TAN code to confirm a transaction.
-
Unexpected links or attachments. For example, they ask you to log into banking through a button in the email or to open an attached form.
-
Unexpected sender. They write about a debt or delivery from a company you have not dealt with.
-
Strange address in the «To» field. This is a reason to verify the message through an official channel.
If you have already entered banking details or confirmed a suspicious transaction:
-
Immediately contact your bank. Take your card or official app with you. Request to block your card or banking access and report suspicious transactions.
-
Change the compromised password. Do this through the official website or app. If you used the same password elsewhere, change it there as well.
-
Preserve the evidence. Take screenshots of the message, phone numbers, and transactions. If money was withdrawn or your data was used, file a report with the police.
If you have only received a suspicious message, open the needed service independently and check if it really asks for any action from you. This is especially important when the page looks like a familiar resource, as in the case of the fake Diia website.