TLDR
Email on behalf of Itsme confirms that a 'new device has been added to trusted devices' and that a transfer of 2,000 4,500 EUR is taking place. The recipient is asked to call a Belgian phone number to cancel. On the phone, the scammer asks...
How it works
Email on behalf of Itsme confirms that a 'new device has been added to trusted devices' and that a transfer of 2,000 4,500 EUR is taking place. The recipient is asked to call a Belgian phone number to cancel. On the phone, the scammer asks...
Red flags
- Urgent pressure to click, pay, or share codes immediately.
- A link or sender that does not match the official organization.
- Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What to do
- 1Indicators: 1) Itsme NEVER sends emails about payments; 2) phone number in email; 3) 'trusted device added' message; 4) urgency.
- 2WHAT TO DO: never call a number from an email.
- 3IF YOU ARE A VICTIM: Card Stop 078 170 170 immediately, report to police, forward the email to verdacht@safeonweb.be.
Source
CCB-SafeOnWeb
Source reviewed by Mythos Forensic Team
https://safeonweb.be/nl/news/wees-op-uw-hoede-voor-phishingmails-die-zich-voordoen-als-itsmerFAQ
Is Itsme phishing — fake confirmation email with transfer of 2,000 EUR a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What should I do first?
Indicators: 1) Itsme NEVER sends emails about payments; 2) phone number in email; 3) 'trusted device added' message; 4) urgency.; WHAT TO DO: never call a number from an email.; IF YOU ARE A VICTIM: Card Stop 078 170 170 immediately, report to police, forward the email to verdacht@safeonweb.be.
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.