Cybercriminals lure people with fake Twint credentials

Cybercriminals send emails with the name Twint – warning about identity theft. Victims have the right to confirm an allegation via a link in the email.

Fraudsters are targeting Twint users with a new scam. In a report on “Cybercrimepolice.ch” writes the Zurich cantonal police about phishing emails that warn of possible identity theft. Twint users should verify their account via a link in the email. If they do not do this, they will no longer be able to use the Twint app.

The link leads to a phishing website in Twint’s corporate design. On this, victims have the right to provide personal information such as name, phone number and bank details. During this fake verification, the fraudsters also ask for an SMS code sent to them and the PIN code. The fraudsters use the SMS code to try to link the Twint account to a new device. If the fraudsters succeed in this, those affected will lose access to their Twint account.

Kapo Zurich provides the following advice against such scams:

• Users should forward fraudulent emails to cybercrimepolice.ch.
• Emails marked as fraudulent should be deleted or moved to the spam folder.
• You should never follow links from emails or SMS to other websites. Users should only access their accounts through the official websites using the login function.
• You should not disclose sensitive data without prior clarification.

Victims who have had their data disclosed should immediately change their Twint password, inform their financial institution and, after notifying them in advance, file a report with the cantonal police office local.

In late August 2024, Manor warned its customers about Manor-designed phishing websites and fake social media profiles. More on this read here.

If you want to read more about cybercrime and cybersecurity, Sign up for the Swisscybersecurity.net newsletter here. On the portal you can read daily news about current threats and new defense strategies.