Scamming

• Scam messages (phishing): You receive emails or text messages from supposedly trustworthy senders, which usually lead to a fake website. There you will be asked to enter personal data such as passwords or credit card numbers.

Examples in Switzerland: 
Fraudsters send emails or text messages in the name of Twint and redirect users to a fake website. In this way, they steal login data for the respective Twint account. Payment requests in the name of platforms, friends or authorities are also a common occurrence now.
Fake online advertisements (ads) work on the same principle. Fraudsters have used this method to place advertisements in the name of a well-known pizza delivery service that lead to a fake website. 

• Scam calls (vishing): Scam calls work like phishing emails. Fraudsters pretend to be reputable sources, such as bank employees, and try to steal data in order to make money. In doing so, they try to apply pressure and create fear.
• Fake online offers: These include websites on which users enter personal data, but also fake subscriptions and fake advertisements. Fraudsters lure users with free services that turn into expensive subscriptions. Or they use fake advertisements with prices that are outstandingly low and where a down payment or deposit is due.
• Falsified invoices: Companies or private individuals receive invoices for services or products that they have never received – the fraudsters hope that these invoices will be paid.
• Romance scam: In romance scams, scammers contact people on dating platforms who are looking for a partner. They build up trust and then invent an emergency to ask for money.
• CEO fraud: Employees are asked for urgent transfers or confidential information, allegedly by high-ranking managers. 
• Investment fraud: In investment fraud, interested parties are lured with lucrative investment opportunities that are, in reality, worthless. The fraudsters use various methods to get your money. Some only ask for small amounts to be transferred regularly at first so as not to arouse suspicion. Others use fake investment platforms that show scam victims how their money is supposedly increasing in value after deposits are made. This encourages them to make further deposits.
• Fake support: A message appears stating that something is wrong with your computer. You are asked to call your provider. The telephone number provided is fake and does not lead to genuine customer support, but to people who redirect you to a fake website. There you are asked to grant the support team access to your computer. Your access is then blocked, and a ransom is demanded to unlock it.
• False friendship on social media: Someone copies the user account of one of your friends and contacts you claiming they urgently need money. You are asked to help and transfer an amount. 

Of course, not every message and every offer is an attempt at fraud. It's worth being aware and finding out about the risks – but without creating fear and losing the joy of being online. 

You can do a lot for your online security with just a few simple tips:

• Check the sender
  Watch out for unusual emails and URLs. Reputable companies usually use official domains like their website. Fraudsters often use slightly modified names or domains that are deceptively similar to the original at first glance.
• Never disclose data without thinking
  Check whom you share data with and what data you share. If you are asked to take action by email or phone call, only respond if the request is legitimate. Do not allow yourself to be put under pressure. If in doubt, you can also end the call, look up the caller's contact details online (e.g. via the official company website) and call them to ask for more information.
• Question
  Are you asked to make an urgent payment or disclose personal data? Don't let yourself be put under pressure, but instead check the request. If you take a closer look at phishing emails or fake websites, you will often see typos or grammatical errors.
  Exaggeratedly cheap offers, unusually high discounts or profits are usually too good to be true – and not genuine. If in doubt, look up the provider and ask for more information.
  
  Tip: Find out about current incidents directly in our Zurich Cyber Security App or on the website of the National Cyber Security Center (NCSC). This ensures you are up to date. 
• Check links and attachments
  Before opening attachments or links, first check the sender and move your computer mouse over the link so that you can see the actual URL. If you are asked to click on a telephone number, you can check via the company's official website whether this number exists and is correct.

Many cyber attacks can be prevented by thinking before you act. Also make sure that you always keep your devices up to date and install updates (e.g. for software). It is equally important that you protect your user accounts for platforms, banking, etc. and use two-factor authentication to log in wherever possible.

Stay calm. It is important to act quickly and correctly in order to limit the extent of the damage. First carry out the following steps:

• Check and block accounts
  Check the list of transactions and report any suspicious transfers to your bank or payment provider immediately. If necessary, have your accounts blocked and inquire about chargeback options.
• Change passwords
  Choose new passwords for all affected accounts – whether online banking, email, social media or other accounts.
• Update software
  Update your antivirus protection.

As soon as this is done, we recommend that you inform the police about the incident. If the fraud took place in the name of a company, you can also report the incident there. In this way, other people can be warned in advance and the company can take measures.

• Cyber crime police: Current incidents in Switzerland
• Center for Cyber Security
• Report incident to the police
• Current cyber incidents
• Cyber protection guide