IBAN-Swap auf gefaelschter Lieferanten-Rechnung
Lieferant erhaelt Account-Compromise via Phishing. Betrueger lesen E-Mail-Verkehr mit, klinken sich in laufenden Thread ein und senden naechste Rechnung als PDF mit identischem Layout, aber...
Betrugsradar
CEO Fraud und BEC: aktuelle Impersonations-Faelle
BEC und CEO Fraud verursachten 2023 laut FBI IC3 bestaetigte Schaeden von 2.9 Mrd USD. Die 2024-2025-Welle erweitert das Drehbuch um KI-Stimmenklon.
Aktuelle Faelle und Muster
CEO-Fraud mit Stimm-Deepfake — gefaelschter Anruf des Geschaeftsfuehrers
Buchhalter erhaelt Anruf des angeblichen Geschaeftsfuehrers (Stimme via KI-Deepfake aus YouTube/LinkedIn-Videos geklont). Es geht um eine 'streng vertrauliche Akquisition', schnelle SEPA-Ueberweisung...
CEO-Stimmen-Klon — gefälschter Chef weist Überweisung per Voice-Note an
Angreifer klonen die Stimme des Geschäftsführers anhand von YouTube/Webinar-Material und schicken dem CFO eine WhatsApp-Sprachnachricht: 'Bitte sofort 350.000 EUR an folgendes IBAN überweisen,...
Device code phishing kits like ARToken and EvilTokens target Microsoft 365 users to bypass MFA
ARToken / EvilTokens: device code phishing against Microsoft 365 Security researchers at Cisco Talos uncovered ARToken , a phishing-as-a-service platform linked to the EvilTokens toolkit, that abuses...
Switzerland (NCSC): top reported scams 2026 — phishing, fake-support calls, investment fraud, parcel & 'chief' smishing
Switzerland's National Cyber Security Centre (NCSC) consistently reports phishing, fake bank/Microsoft 'support' calls, investment fraud (fake brokers/crypto), parcel/customs smishing, and...
Deepfake CEO/CFO video-call fraud: real-time face & voice swap on Teams/Zoom authorising urgent wires
Following the Arup HK$200M (~USD 25.6M) case, real-time deepfake video-call fraud has spread: finance staff are invited to a Teams/Zoom call where the 'CFO' and 'colleagues' are AI-generated,...
European Payments Council 2025 report: social engineering & Authorised Push Payment (APP) fraud dominate EU payment fraud
The European Payments Council's 2025 Payment Threats and Fraud Trends report identifies social engineering and Authorised Push Payment (APP) fraud as the leading EU payment-fraud drivers, amplified...
Europol IOCTA 2026: fraud is now the fastest-growing area of organised crime; AI impersonation of banks & police
Europol's Internet Organised Crime Threat Assessment (IOCTA) 2026 names online fraud the fastest-growing area of internet-enabled organised crime. Schemes increasingly use AI to impersonate bank...
AI-facilitated fraud surging: 22,000+ IC3 complaints, USD 893M+ losses (2025) — voice clones, deepfakes, AI chatbots
In 2025 the FBI IC3 received more than 22,000 complaints citing AI involvement, with losses exceeding USD 893 million. Criminals use generative AI to: clone a relative's or executive's voice from...
EvilTokens: Microsoft 365 phishing that bypasses passwords and 2FA via device code hijack
EvilTokens is a phishing-as-a-service kit sold on Telegram that compromises Microsoft 365 accounts without fake login pages or stolen passwords. Attackers trick victims into completing a legitimate...
Europol IOCTA 2026 — AI-driven industrialised fraud across EU
Europol IOCTA 2026 highlights how AI, encryption and proxies have industrialised cross-border EU fraud. Fraud-as-a-Service kits enable mass-scale BEC, romance scams and investment fraud with...
Subpoena / arrest warrant phone scam — fake federal officer
Caller claims to be FBI, US Marshal, DEA or local sheriff with an active warrant for missed jury duty, drug trafficking or contempt. Victim told to avoid arrest by paying 'bond' in cash, gift cards,...
Immigration / visa fraud — fake USCIS lottery and 'notario'
Scammer poses as USCIS, ICE or 'notario público' offering DV lottery win, expedited green card, or threatening deportation unless fee is paid. FTC + DOJ: immigration scams cost vulnerable communities...
Utility shutoff scam — fake ConEd / PG&E / Duke disconnection call
Caller spoofs utility number, claims account is 60+ days past due and power/gas will be shut off within 30 minutes unless victim pays via prepaid card (Vanilla, Green Dot MoneyPak), Bitcoin ATM or...
Student loan forgiveness scam — fake PSLF / IDR fee
Scammer texts/emails 'you qualify for Biden / Trump student loan forgiveness — pay $399 processing fee' or asks for FSA ID password to 'apply on your behalf'. Federal student aid programs (PSLF,...
Payroll diversion — fake HR direct-deposit change
Attacker emails HR/payroll from a lookalike of employee's address (john.smith@gmaiI.com with capital I instead of l), requesting a direct-deposit change to a different bank, often a neobank or...
W-2 phishing — HR-targeted tax season scheme
January-March: attacker spoofs CEO / CFO email to HR/payroll: 'Please send me the W-2s of all employees for review before filing.' HR replies with a ZIP / Excel containing SSN, address and 2024 wages...
Deepfake CEO audio call — voice-cloned wire instruction
Finance employee receives Teams/Zoom call where the CEO's voice and (increasingly) video are AI-generated using ElevenLabs / HeyGen / public earnings call footage. Voice instructs urgent wire to 'M&A...
Verdaechtige Nachricht, Link oder Datei?
Mythos oeffnen und einfuegen. Kostenlose Triage in Sekunden. Forensisches Dossier ab CHF 29/Monat.