Imago / Bildmontage blue News
Customers of Galaxus are being targeted by a sophisticated phishing campaign. Cybercriminals are distributing emails promising a customer satisfaction survey and a free perfume sample, luring recipients to a deceptive website designed to steal financial information.
Key Takeaways
- Fraudsters are sending phishing emails impersonating Galaxus and offering a survey as a lure.
- A fake website is used to collect personal data and credit card details.
- Individuals who have submitted their information should immediately contact their bank and file a report.
Fraudulent emails purporting to be from Galaxus are currently circulating in Switzerland. Authorities warn that Here’s a phishing scheme intended to obtain sensitive customer data. The messages mimic official customer satisfaction requests and offer a complimentary product as a thank you.
Clicking the link within the email redirects users not to the legitimate online retailer’s website, but to a remarkably accurate forgery. The website closely resembles the original in appearance, creating a convincing facade of legitimacy. The survey questions appear innocuous, focusing on purchasing habits and satisfaction with the company’s offerings.
Screenshot
The process then requests users to provide personal information to receive the promised gift, including mailing addresses, email addresses, and other contact details. This information can be used by the perpetrators for identity theft or further targeted fraudulent activities.
Police Warn of Misuse
A payment process mimicking the official Galaxus checkout appears at the end of the process. Despite the product being advertised as free, a small amount – for example, for shipping – is requested. Providing credit card details at this stage transmits them directly to the criminals, potentially leading to unauthorized charges or further financial harm.
Cybercrimepolice.ch advises consistently ignoring suspicious emails and refraining from clicking any links. Sensitive data should only be entered on trustworthy and carefully vetted websites. If uncertain, individuals should contact the company directly through official channels.
Individuals who have already disclosed their credit card information should immediately contact their financial institution and have the affected cards blocked. It is also recommended to closely monitor account and credit card activity and report the incident to the relevant cantonal police.
