LEGALAUDIT

Scam Radar

How can you recognize LuxTrust Phishing — Token Update Required?

Published

TLDR

Email from Luxembourg imitates LuxTrust S.A. (provider of digital identity/eID) and claims that the LuxTrust Mobile Token must be 'updated', otherwise access to banks and MyGuichet will be blocked. Link leads to luxtrust update.com...

How it works

Email from Luxembourg imitates LuxTrust S.A. (provider of digital identity/eID) and claims that the LuxTrust Mobile Token must be 'updated', otherwise access to banks and MyGuichet will be blocked. Link leads to luxtrust update.com...

Red flags

  • Urgent pressure to click, pay, or share codes immediately.
  • A link or sender that does not match the official organization.
  • Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.

What to do

  1. 1(provider of digital identity/eID) and claims that the LuxTrust Mobile Token must be 'updated', otherwise access to banks and MyGuichet will be blocked.
  2. 2Indicators: 1) LuxTrust never sends update links via email; 2) Domain not .lu; 3) Bank PIN AND LuxTrust PIN requested simultaneously; 4) Threat of blocking.
  3. 3IF SCAMMED: LuxTrust Hotline +352 24 550 550, contact bank, report to CIRCL Luxembourg (info@circl.lu), Police Grand Ducale.

Source

CIRCL

Source reviewed by Mythos Forensic Team

https://www.circl.lu/

FAQ

Is LuxTrust Phishing — Token Update Required a real scam pattern?

Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.

What are the first warning signs?

Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.

What should I do first?

(provider of digital identity/eID) and claims that the LuxTrust Mobile Token must be 'updated', otherwise access to banks and MyGuichet will be blocked.; Indicators: 1) LuxTrust never sends update links via email; 2) Domain not .lu; 3) Bank PIN AND LuxTrust PIN requested simultaneously; 4) Threat of blocking.; IF SCAMMED: LuxTrust Hotline +352 24 550 550, contact bank, report to CIRCL Luxembourg (info@circl.lu), Police Grand Ducale.

Can LegalAudit check my case?

Yes. Start a free chat and paste the message, link, sender, or payment details for triage.