Zacharie Scheurer/dpa-tmn
Scammers are sending emails in the name of Serafe AG. The pretext is to carry out a residency verification, but in reality their goal is to obtain AVS numbers and credit card information. Here’s how to protect yourself.
Are you in a hurry? blue News summarizes for you
Table of Contents
- Someone may receive fake emails in the name of Serafe AG, asking to verify their place of residence.
- Fraudsters thus try to obtain personal data such as the AVS number, transfer date and credit card data.
- The Federal Office for Information Security warns of this new scam.
A new scam is circulating these days. So be careful if you receive an email, apparently from Serafe AG, asking you to verify your place of residence.
The Federal Office for Cybersecurity (FOCS) warns that this is a phishing campaign.
Under the guise of having to verify the “current housing situation”, cybercriminals are trying to obtain a complete set of personal data. From name, date of birth, AVS number to credit card details.
According to the UFCS, the name «Serafe» was not chosen by chance. Since all households in Switzerland pay the tax to the radio and television license collection centre, an email from this sender appears credible to almost all recipients.
Federal Office of Cybersecurity
Complex structure of the scam
The structure of the scam is particularly surprising. Victims are initially asked to enter innocuous-looking data on a fake website, but are eventually asked for credit card information as well.
According to the UFCS, the goal of this multi-stage approach is to collect as much data as possible.
The requests also include the date of a possible transfer, information that could be used for a subsequent attack. For example, under the guise of postal or banking services in the period of the transfer.
In essence, the authors are trying to target stressed or inattentive people at a delicate moment.
Here’s how to protect yourself
It should be known that Serafe will never ask you through an email to verify your housing situation, to communicate your AVS number or to enter your credit card details.
The company receives all the necessary data exclusively and automatically from the inhabitants control office of your municipality. You will therefore never have to communicate your transfer to Serafe.
Also, never enter sensitive data on a website that reached you via a link in an email. Serafe’s official payment methods are electronic invoice, direct debit or payment slip.
If you receive suspicious emails, move your mouse over the link (WITHOUT clicking) to see the real destination address in the preview. Then report the suspicious email to the UFCS.
If you have already entered the data
If by chance you have fallen for it and have already clicked on the link and entered the various requested data, contact your bank immediately and have your card canceled.
Also check all transactions and file a report with the cantonal police. The latter is necessary in case of identity theft and can often be done online.
Finally, be prepared for any other attacks (via phone calls or emails) that could use the data that was stolen from you (AVS number or date of move).
