Fraud: New attack on bank customers with a transfer of 4999 euros

A suspicious transfer of € 4999 is being used as a pretext for a new wave of attacks on bank customers.

Consumer advocates are warning of new fraudulent emails. Phishing emails have the hideous “System Alert Code” subject line. Under the Volks- und Raiffeisenbanken logo is the orange notice: “WARNING! Suspicious transfer canceled!” (The spelling mistake is original).

This is followed by the general greeting “Dear Sir or Madam” and the text of the email states that the security system has intercepted a “very suspicious transfer” of EUR 4,999. The money would be transferred from the email recipient’s account to a foreigner. The bank suspected a hacker attack and canceled the transfer.


The bank claims that the canceled transfer would not show up in the customer’s online account history. The scammers want to prevent the customer from becoming suspicious when they log into their online banking and not notice anything about the “suspicious transfer”.

Then the mail comes to the crux: the customer would have to re-authenticate to make sure their account hasn’t been hijacked. To do this, the customer has to click on the orange button labeled “To Homepage”. Of course, the link behind it does not lead to actual online banking, but to a fake website where customer login data is supposed to be stolen.

How to recognize this phishing mail

The mail, which is supposed to come from Volksbanken and Raiffeisenbanken, shows the sender’s address

. The text of the email is full of spelling errors. Also, your bank will never send you an email with a link to log in. Instead, you should always log in using the link set as a favorite / bookmark in your browser.

There is no indication that this mail is intended solely for the clients of Volks- und Raiffeisenbanken. This phishing e-mail is likely to be the typical “cluster bomb principle”: the e-mail is sent to as many e-mail addresses as possible in the hope that there will be customers of Volks- und Raiffeisenbanken and these in shoot at least some will go in the fall for scam.


Then delete this mail without clicking on anything in it.

About the author


Leave a Comment