[{"data":1,"prerenderedAt":914},["ShallowReactive",2],{"fraud-types-index-en":3},[4,80,152,260,365,469,589,649,707,779,840],{"id":5,"title":6,"body":7,"cardTitleHtml":68,"category":69,"description":70,"extension":71,"meta":72,"navigation":73,"path":74,"redFlagsCount":75,"seo":76,"slug":77,"stem":78,"__hash__":79},"fraudTypes\u002Fen\u002Ffraud-types\u002F01.fake-online-banking.md","Fake online banking",{"type":8,"value":9,"toc":65},"minimark",[10],[11,12,13,38,43],"lhc-fraud-type-content",{},[14,15,17,21,24,32],"template",{"v-slot:description":16},"",[18,19,20],"p",{},"A fraudster creates a website that closely resembles the genuine online-banking portal of a Luxembourg bank. The victim may find the fraudulent site through a search engine, an advertisement, SMS, email or another link. The fake portal asks for login credentials and potentially authentication information.",[18,22,23],{},"The stolen information can then be used to access the victim's genuine banking account or facilitate fraudulent transactions. The Luxembourg Police has specifically reported cases involving fake online-banking portals that appeared genuine and advised customers to access online banking only through the bank's official app or official URL.",[18,25,26,27,31],{},"A particularly dangerous element is that the fraudulent website may appear ",[28,29,30],"strong",{},"identical to the genuine site",".",[18,33,34,37],{},[28,35,36],{},"Be extra cautious if the website was reached through a search advertisement:"," This is particularly relevant in Luxembourg because the Luxembourg Police has warned about fake banking portals appearing in search-engine results. Don't assume the first result in a search engine is the official banking website but use official bank app or manually enter a known official website url instead.",[14,39,40],{"v-slot:example":16},[18,41,42],{},"A customer wants to check his Luxembourg bank account and searches Google for the bank's online-banking service. He clicks on a result that appears legitimate and is taken to a cloned banking website. The page requests his username, password and authentication information. The victim enters the information and believes he has successfully logged in. The fraudster has, however, captured the credentials and may use them to access the genuine banking service and attempt unauthorised transactions.",[14,44,45],{"v-slot:red-flags":16},[46,47,48,49,48,53,48,56,48,59,48,62],"ul",{},"\n  ",[50,51,52],"li",{},"You receive an SMS, email, WhatsApp message or social-media message containing a link to “log in” to your bank.",[50,54,55],{},"The web address is unfamiliar or slightly different from your bank's real address:",[50,57,58],{},"You are being pressured to act immediately such as “Suspicious activity detected. Verify immediately.”",[50,60,61],{},"Someone asks for your password, PIN or authentication code somewhere other than your bank's normal authentication process.",[50,63,64],{},"You are asked to approve a transaction you did not initiate.",{"title":16,"searchDepth":66,"depth":66,"links":67},2,[],"Fake \u003Cbr> online \u003Cbr> banking","Financial fraud","Learn how fake online-banking portals steal credentials and how to recognise the warning signs.","md",{},true,"\u002Fen\u002Ffraud-types\u002Ffake-online-banking",5,{"title":6,"description":70},"fake-online-banking","en\u002Ffraud-types\u002F01.fake-online-banking","lQ2QGQw_m_WBwSHcqjXnnv3KZdVo036Zl9aBRNAjtr8",{"id":81,"title":82,"body":83,"cardTitleHtml":143,"category":69,"description":144,"extension":71,"meta":145,"navigation":73,"path":146,"redFlagsCount":147,"seo":148,"slug":149,"stem":150,"__hash__":151},"fraudTypes\u002Fen\u002Ffraud-types\u002F02.fake-investment-platform.md","Fake investment platform",{"type":8,"value":84,"toc":141},[85],[11,86,87,101,113],{},[14,88,89,95,98],{"v-slot:description":16},[18,90,91,92,31],{},"A victim is approached online with an apparently attractive investment opportunity. The contact may originate from ",[28,93,94],{},"WhatsApp, SMS, email, social media or an unsolicited telephone call",[18,96,97],{},"The fraudster directs the victim to a professional-looking investment website.",[18,99,100],{},"The platform may show an investment portfolio, charts, account balances, trading activity or apparently increasing profits. However, the displayed investment performance may be entirely fictitious.",[14,102,103,106],{"v-slot:example":16},[18,104,105],{},"A Luxembourg resident receives a WhatsApp message offering an opportunity to invest in financial markets. The sender presents themselves as an experienced investment adviser. The victim is given access to an online trading platform and initially transfers €2,000. The platform shows the account increasing to €2,800. Encouraged by the apparent success, the victim transfers another €15,000. When they subsequently request a withdrawal, the platform claims that additional taxes, verification charges or administrative fees must be paid. After the victim makes further payments, communication stops.",[18,107,108,109,112],{},"The amounts in this illustration are hypothetical; the ",[28,110,111],{},"fraud mechanism"," reflects the pattern described by Luxembourg authorities.",[14,114,115],{"v-slot:red-flags":16},[46,116,48,117,48,120,48,123,48,126,48,129,48,132,48,135,48,138],{},[50,118,119],{},"You were contacted unexpectedly with an investment opportunity.",[50,121,122],{},"You are promised high or guaranteed returns with little\u002Fno risk (think “too good to be true”).",[50,124,125],{},"You are pressured to invest immediately.",[50,127,128],{},"A small initial investment produces unusually high “profits” on the platform.",[50,130,131],{},"The company claims to be CSSF-authorised, but you cannot independently verify it.",[50,133,134],{},"You are asked to send money to an unrelated or foreign bank account.",[50,136,137],{},"You cannot withdraw your money without paying another tax, fee, deposit or “unblocking” charge.",[50,139,140],{},"An adviser asks you to install remote-access software.",{"title":16,"searchDepth":66,"depth":66,"links":142},[],"Fake \u003Cbr> investment \u003Cbr> platform","A victim is approached online with an apparently attractive investment opportunity and directed to a fraudulent platform.",{},"\u002Fen\u002Ffraud-types\u002Ffake-investment-platform",8,{"title":82,"description":144},"fake-investment-platform","en\u002Ffraud-types\u002F02.fake-investment-platform","TD4FZnOcnO34zrOKe1a9m6ChS6P6LRe7DJTFG_8bVAA",{"id":153,"title":154,"body":155,"cardTitleHtml":252,"category":69,"description":253,"extension":71,"meta":254,"navigation":73,"path":255,"redFlagsCount":147,"seo":256,"slug":257,"stem":258,"__hash__":259},"fraudTypes\u002Fen\u002Ffraud-types\u002F03.fake-financial-institution.md","Fake financial institution",{"type":8,"value":156,"toc":250},[157],[11,158,159,201,206],{},[14,160,161,164,171,178,192,195],{"v-slot:description":16},[18,162,163],{},"This is more sophisticated than simply creating a fictional investment company.",[18,165,166,167,170],{},"The fraudster ",[28,168,169],{},"impersonates an actual or apparently legitimate Luxembourg financial institution",". The criminal may copy the institution's name, logo, Luxembourg address, website, employee names, regulatory information, company registration details.",[18,172,173,174,177],{},"The victim may search the company independently and discover that the ",[28,175,176],{},"real company actually exists",". This makes the fraud particularly convincing.",[18,179,180,181,188],{},"The CSSF regularly publishes warnings concerning the misuse of the identities of legitimate Luxembourg financial-sector entities at: ",[182,183],"a",{"href":184,"target":185,"rel":186},"https:\u002F\u002Fwww.cssf.lu\u002Fen\u002Fwarnings\u002F","_blank",[187],"noreferrer",[182,189,184],{"href":184,"rel":190},[191],"nofollow",[18,193,194],{},"A basic check such as “Does this company exist?” may produce the wrong conclusion.",[18,196,197,198],{},"The correct question is: ",[28,199,200],{},"“Is this particular person, website, email address and financial offer genuinely operated by that company?”",[14,202,203],{"v-slot:example":16},[18,204,205],{},"An investor receives an email from someone claiming to work for a Luxembourg financial institution. The email contains the institution's logo and a link to a professional-looking website. The company name and Luxembourg address appear legitimate. The fraudster offers access to an investment product and sends documents containing regulatory terminology and apparently official information. The investor transfers funds to the account provided. The genuine Luxembourg company later confirms that it had no relationship with the person or transaction.",[14,207,208],{"v-slot:red-flags":16},[46,209,48,210,48,215,48,220,48,225,48,230,48,235,48,240,48,245],{},[50,211,212],{},[28,213,214],{},"The website is different from the financial institution's official website.",[50,216,217],{},[28,218,219],{},"The email address doesn't match the institution's official domain.",[50,221,222],{},[28,223,224],{},"The person contacting you cannot be independently verified as an employee or representative.",[50,226,227],{},[28,228,229],{},"The legal name, Luxembourg address or telephone number doesn't match official information.",[50,231,232],{},[28,233,234],{},"The website uses the CSSF logo or claims to be “CSSF regulated” but you haven't independently verified it.",[50,236,237],{},[28,238,239],{},"You receive investment brochures, certificates or financial guarantees that cannot be verified directly with the genuine institution.",[50,241,242],{},[28,243,244],{},"You are asked to transfer money to an account that is not in the exact name of the institution.",[50,246,247],{},[28,248,249],{},"You are pressured to invest quickly or promised unusually high\u002Fguaranteed returns.",{"title":16,"searchDepth":66,"depth":66,"links":251},[],"Fake \u003Cbr> financial\u003Cbr>  institution","Fraudsters impersonate real or apparently legitimate Luxembourg financial institutions to make fraudulent offers convincing.",{},"\u002Fen\u002Ffraud-types\u002Ffake-financial-institution",{"title":154,"description":253},"fake-financial-institution","en\u002Ffraud-types\u002F03.fake-financial-institution","s2vcWEFHKiL9hCi3roYEquExjRSTL9D7b63_FSeAIxo",{"id":261,"title":262,"body":263,"cardTitleHtml":357,"category":69,"description":358,"extension":71,"meta":359,"navigation":73,"path":360,"redFlagsCount":147,"seo":361,"slug":362,"stem":363,"__hash__":364},"fraudTypes\u002Fen\u002Ffraud-types\u002F04.crypto-investment-fraud.md","Crypto investment fraud",{"type":8,"value":264,"toc":355},[265],[11,266,267,306,311],{},[14,268,269,272,275,278,281,284,289],{"v-slot:description":16},[18,270,271],{},"Crypto fraud can take several forms, but a Luxembourg Police example involves fake security alerts and social engineering.",[18,273,274],{},"The victim receives a message suggesting that their cryptocurrency account has been compromised. They are instructed to call a number or follow a procedure to “protect” their assets.",[18,276,277],{},"The fraudster then persuades the victim to transfer cryptocurrency to a supposedly secure or trust wallet.",[18,279,280],{},"The wallet is actually controlled by the criminal.",[18,282,283],{},"The Luxembourg Police specifically warns about this type of crypto scam and advises that legitimate crypto platforms do not ask customers to transfer crypto to another wallet or disclose sensitive credentials such as private keys or seed phrases.",[18,285,286],{},[28,287,288],{},"Why crypto is particularly attractive to fraudsters?",[46,290,291,294,297,300,303],{},[50,292,293],{},"Transfers can be rapid.",[50,295,296],{},"Transactions may be irreversible.",[50,298,299],{},"Victims may have difficulty identifying the recipient.",[50,301,302],{},"Cross-border transfers are easy.",[50,304,305],{},"Victims may not understand wallet mechanics.",[14,307,308],{"v-slot:example":16},[18,309,310],{},"A Luxembourg resident receives an SMS claiming that an unusual login has been detected on their cryptocurrency account. The message provides a telephone number for the “security department”. The victim calls and speaks with someone who appears knowledgeable about crypto-assets. The fraudster says the account is under attack and instructs the victim to move their crypto-assets to a secure wallet. The victim follows the instructions. The assets are transferred to a wallet controlled by the fraudster and cannot be recovered through the supposed security process.",[14,312,313],{"v-slot:red-flags":16},[46,314,48,315,48,320,48,325,48,330,48,335,48,340,48,345,48,350],{},[50,316,317],{},[28,318,319],{},"You were contacted unexpectedly by WhatsApp, SMS, Telegram, social media or telephone with an investment opportunity.",[50,321,322],{},[28,323,324],{},"You are promised guaranteed or unusually high returns with little\u002Fno risk.",[50,326,327],{},[28,328,329],{},"Someone asks for your seed phrase, private key, password or authentication code.",[50,331,332],{},[28,333,334],{},"Someone tells you to transfer your crypto to a “secure”, “trust” or “recovery” wallet.",[50,336,337],{},[28,338,339],{},"The platform shows large profits but you cannot independently verify where your money is actually invested.",[50,341,342],{},[28,343,344],{},"You cannot withdraw your crypto unless you first pay a tax, fee, deposit or “unblocking” charge.",[50,346,347],{},[28,348,349],{},"An adviser asks you to install remote-access software or give them control of your device.",[50,351,352],{},[28,353,354],{},"The platform claims to be Luxembourg\u002FEU regulated, but you cannot independently verify the legal entity and regulatory authorisation.",{"title":16,"searchDepth":66,"depth":66,"links":356},[],"Crypto \u003Cbr> investment \u003Cbr> fraud","Crypto fraud can involve fake security alerts and social engineering designed to make victims transfer their assets.",{},"\u002Fen\u002Ffraud-types\u002Fcrypto-investment-fraud",{"title":262,"description":358},"crypto-investment-fraud","en\u002Ffraud-types\u002F04.crypto-investment-fraud","ZbMEwSujmHX8oAEkJIu0c98Nc0RcqSrBABvcTTWzr6Q",{"id":366,"title":367,"body":368,"cardTitleHtml":461,"category":69,"description":462,"extension":71,"meta":463,"navigation":73,"path":464,"redFlagsCount":147,"seo":465,"slug":466,"stem":467,"__hash__":468},"fraudTypes\u002Fen\u002Ffraud-types\u002F05.fake-cssf-intervention.md","Fake CSSF intervention",{"type":8,"value":369,"toc":459},[370],[11,371,372,406,415],{},[14,373,374,377,380,383,400,403],{"v-slot:description":16},[18,375,376],{},"This exploits the credibility of the country's financial regulator. The fraud generally happens after or alongside an initial investment\u002Fcrypto fraud.",[18,378,379],{},"The victim is contacted by someone claiming to represent the CSSF.",[18,381,382],{},"The fraudster tells the victim that their funds have been:",[46,384,385,388,391,394,397],{},[50,386,387],{},"recovered;",[50,389,390],{},"frozen;",[50,392,393],{},"identified;",[50,395,396],{},"protected;",[50,398,399],{},"placed under regulatory supervision.",[18,401,402],{},"The victim is then told that they must pay something before the funds can be released.",[18,404,405],{},"The CSSF has specifically warned about fraudsters impersonating the CSSF and requesting payments described as taxes, insurance premiums, account-opening fees or other charges.",[14,407,408,411],{"v-slot:example":16},[18,409,410],{},"An investor has already lost money through a fraudulent investment platform. Several weeks later, they receive an email from someone claiming to be a CSSF official. The message contains the CSSF logo and refers to the victim's previous investment. The fraudster claims that the CSSF has identified €40,000 belonging to the victim and that the money can be released after payment of a €2,000 “regulatory tax”. The victim makes the payment. The fraudster subsequently demands another fee.",[18,412,108,413,112],{},[28,414,111],{},[14,416,417],{"v-slot:red-flags":16},[46,418,48,419,48,424,48,429,48,434,48,439,48,444,48,449,48,454],{},[50,420,421],{},[28,422,423],{},"You receive an unexpected message from someone claiming to be a CSSF official.",[50,425,426],{},[28,427,428],{},"The sender uses the CSSF name\u002Flogo but the email address or website cannot be independently verified as official.",[50,430,431],{},[28,432,433],{},"You are asked to pay a “CSSF fee”, tax, AML charge, release fee or deposit to recover or unlock your money.",[50,435,436],{},[28,437,438],{},"You are told that the CSSF has frozen your funds and that payment is required to release them.",[50,440,441],{},[28,442,443],{},"You are told that the CSSF has recovered your lost investment and you must pay before receiving it.",[50,445,446],{},[28,447,448],{},"You receive a “CSSF certificate”, recovery document or case number that you cannot independently verify.",[50,450,451],{},[28,452,453],{},"You are asked for your banking password, OTP, crypto seed phrase, private key or other sensitive credentials.",[50,455,456],{},[28,457,458],{},"You are asked to install remote-access software or are prevented from contacting the CSSF directly.",{"title":16,"searchDepth":66,"depth":66,"links":460},[],"Fake \u003Cbr> CSSF \u003Cbr> intervention","Fraudsters exploit the credibility of Luxembourg's financial regulator, often after an initial investment or crypto fraud.",{},"\u002Fen\u002Ffraud-types\u002Ffake-cssf-intervention",{"title":367,"description":462},"fake-cssf-intervention","en\u002Ffraud-types\u002F05.fake-cssf-intervention","rgNb5mOUl1bIIdbNFEcoj9n2btvP8q60JGJNk5ziJKE",{"id":470,"title":471,"body":472,"cardTitleHtml":581,"category":69,"description":582,"extension":71,"meta":583,"navigation":73,"path":584,"redFlagsCount":147,"seo":585,"slug":586,"stem":587,"__hash__":588},"fraudTypes\u002Fen\u002Ffraud-types\u002F06.recovery-of-previously-lost-funds.md","Recovery of previously lost funds",{"type":8,"value":473,"toc":579},[474],[11,475,476,526,535],{},[14,477,478,488,491,494,514,517,520,523],{"v-slot:description":16},[18,479,480,481,484,485,31],{},"This is commonly called a ",[28,482,483],{},"recovery scam"," or ",[28,486,487],{},"second-stage fraud",[18,489,490],{},"The criminal specifically targets someone who has already been defrauded.",[18,492,493],{},"The fraudster claims to have special access to:",[46,495,496,499,502,505,508,511],{},[50,497,498],{},"blockchain investigators;",[50,500,501],{},"lawyers;",[50,503,504],{},"regulators;",[50,506,507],{},"law enforcement;",[50,509,510],{},"banks;",[50,512,513],{},"asset-recovery specialists.",[18,515,516],{},"They tell the victim:",[18,518,519],{},"“We have found your money.”",[18,521,522],{},"The victim is then asked to pay a fee before the supposed recovery can take place.",[18,524,525],{},"The CSSF has warned that recovery fraudsters may also use remote-access software, claiming that they need access to the victim's computer to recover the money.",[14,527,528,531],{"v-slot:example":16},[18,529,530],{},"A Luxembourg resident has already lost €30,000 through an investment scam. Months later, they receive an email from a company claiming to specialise in recovering stolen investment funds. The company provides a convincing website and claims to have located €25,000 of the victim's money. It requests €2,500 for “legal and administrative costs”. After the victim pays, another €3,000 is requested for “tax clearance”. The supposed recovery never takes place.",[18,532,108,533,112],{},[28,534,111],{},[14,536,537],{"v-slot:red-flags":16},[46,538,48,539,48,544,48,549,48,554,48,559,48,564,48,569,48,574],{},[50,540,541],{},[28,542,543],{},"Someone unexpectedly contacts you after you have lost money in an investment or crypto scam.",[50,545,546],{},[28,547,548],{},"They claim they have already located or recovered your lost funds.",[50,550,551],{},[28,552,553],{},"They demand an upfront fee, tax, AML charge, insurance payment or deposit before releasing your money.",[50,555,556],{},[28,557,558],{},"They claim to be acting for the CSSF, Police, court, bank or another authority.",[50,560,561],{},[28,562,563],{},"They claim they can recover cryptocurrency or reverse a blockchain transaction using special technology.",[50,565,566],{},[28,567,568],{},"They ask for your banking password, OTP, crypto seed phrase, private key or wallet credentials.",[50,570,571],{},[28,572,573],{},"They ask you to install remote-access software or transfer crypto to a “recovery” or “secure” wallet.",[50,575,576],{},[28,577,578],{},"They pressure you to pay immediately or repeatedly introduce new fees before releasing your funds.",{"title":16,"searchDepth":66,"depth":66,"links":580},[],"Recovery of \u003Cbr> previously \u003Cbr> lost funds","Recovery scams specifically target people who have already been defrauded by promising to recover their lost money.",{},"\u002Fen\u002Ffraud-types\u002Frecovery-of-previously-lost-funds",{"title":471,"description":582},"recovery-of-previously-lost-funds","en\u002Ffraud-types\u002F06.recovery-of-previously-lost-funds","E1etQjc3lCVpmiF3i3Yk1XpCNaFBDX72TwAECJV96p4",{"id":590,"title":591,"body":592,"cardTitleHtml":640,"category":69,"description":641,"extension":71,"meta":642,"navigation":73,"path":643,"redFlagsCount":644,"seo":645,"slug":646,"stem":647,"__hash__":648},"fraudTypes\u002Fen\u002Ffraud-types\u002F07.money-mule.md","Money mule",{"type":8,"value":593,"toc":638},[594],[11,595,596,601,610],{},[14,597,598],{"v-slot:description":16},[18,599,600],{},"Money mule is a fraud-related risk where a person is recruited to use their own bank account or card to receive and move criminal proceeds. The Luxembourg Police specifically warns that money mules are often recruited through social media and messaging platforms and that making an account or bank card available to third parties can constitute money laundering. This is particularly dangerous for young people who may be tempted by the promise of making easy money.",[14,602,603,606],{"v-slot:example":16},[18,604,605],{},"A victim is contacted through social media with an offer to earn €300 per week by acting as a “payment agent.” The victim is instructed to provide their bank account details, receives €8,000 from an unknown third party, keeps €300 as a commission, and transfers the remaining €7,700 to another account specified by the recruiter. The victim may believe this is legitimate payment processing, but the account is being used to move money obtained through fraud.",[18,607,108,608,112],{},[28,609,111],{},[14,611,612],{"v-slot:red-flags":16},[46,613,48,614,48,617,48,620,48,623,48,626,48,629,48,632],{},[50,615,616],{},"“Easy money” for simply receiving and transferring funds",[50,618,619],{},"Recruitment through social media or messaging apps",[50,621,622],{},"Transfers to unrelated or foreign accounts",[50,624,625],{},"The victim is asked to convert money into cryptocurrency",[50,627,628],{},"Pressure to transfer the money immediately",[50,630,631],{},"The person is asked to open a bank account specifically for someone else's transactions",[50,633,634,637],{},[28,635,636],{},"Money arrives from an unknown person and the victim is instructed to"," keep a small percentage and transfer the rest.",{"title":16,"searchDepth":66,"depth":66,"links":639},[],"Money \u003Cbr> mule","Money mules are recruited to use their own bank account or card to receive and move criminal proceeds.",{},"\u002Fen\u002Ffraud-types\u002Fmoney-mule",7,{"title":591,"description":641},"money-mule","en\u002Ffraud-types\u002F07.money-mule","G2Rjta7iK5HmXwa2MN-qVJm4VAmc-R9cYW5NoDMgxXs",{"id":650,"title":651,"body":652,"cardTitleHtml":699,"category":69,"description":700,"extension":71,"meta":701,"navigation":73,"path":702,"redFlagsCount":147,"seo":703,"slug":704,"stem":705,"__hash__":706},"fraudTypes\u002Fen\u002Ffraud-types\u002F08.malware-fraud.md","Malware fraud",{"type":8,"value":653,"toc":697},[654],[11,655,656,661,669],{},[14,657,658],{"v-slot:description":16},[18,659,660],{},"Malware fraud involves criminals using malicious software to infect a victim’s computer or phone, often after the victim clicks a fraudulent link, opens an attachment, or installs supposedly legitimate software. Once installed, the malware can allow criminals to steal credentials, monitor activity, access accounts, or facilitate unauthorised transactions.",[14,662,663],{"v-slot:example":16},[18,664,665,668],{},[28,666,667],{},"The victim receives an email containing what appears to be an invoice and is instructed to install an “Adobe module” to open it. The installation actually downloads remote-access software, allowing the fraudsters to control the computer and obtain access to payment credentials before making unauthorised transfers."," This scenario has been reported by the Luxembourg Police in cases targeting businesses.",[14,670,671],{"v-slot:red-flags":16},[46,672,48,673,48,676,48,679,48,682,48,685,48,688,48,691,48,694],{},[50,674,675],{},"An unexpected email asks the victim to install software to open a document.",[50,677,678],{},"The victim is instructed to install remote-access software unexpectedly.",[50,680,681],{},"An attachment or link is presented as a security update, invoice, document or technical module.",[50,683,684],{},"The computer suddenly behaves unusually after opening an attachment or installing software.",[50,686,687],{},"Unknown software or browser extensions appear on the device.",[50,689,690],{},"Online banking shows unexpected transactions, new beneficiaries, settings or contact details.",[50,692,693],{},"The victim receives unexpected authentication\u002FLuxTrust requests after installing suspicious software.",[50,695,696],{},"Security software is unexpectedly disabled or generates warnings.",{"title":16,"searchDepth":66,"depth":66,"links":698},[],"Malware \u003Cbr> fraud","Criminals use malicious software to infect devices, steal credentials, access accounts, or facilitate unauthorised transactions.",{},"\u002Fen\u002Ffraud-types\u002Fmalware-fraud",{"title":651,"description":700},"malware-fraud","en\u002Ffraud-types\u002F08.malware-fraud","EZhc3fMpYDApOE5gV5Z1ZdV5M50ydHCFGZOgFyqvC8w",{"id":708,"title":709,"body":710,"cardTitleHtml":770,"category":771,"description":772,"extension":71,"meta":773,"navigation":73,"path":774,"redFlagsCount":147,"seo":775,"slug":776,"stem":777,"__hash__":778},"fraudTypes\u002Fen\u002Ffraud-types\u002F09.luxtrust-fraud.md","LuxTrust fraud",{"type":8,"value":711,"toc":768},[712],[11,713,714,719,724],{},[14,715,716],{"v-slot:description":16},[18,717,718],{},"LuxTrust fraud occurs when criminals impersonate LuxTrust or a bank to trick victims into revealing authentication credentials, OTPs, scanning QR codes, or approving fraudulent transactions. A common warning sign is an unexpected call, SMS, or email creating urgency and asking you to “secure” your account or cancel a transaction through LuxTrust.",[14,720,721],{"v-slot:example":16},[18,722,723],{},"The victim receives a call from someone claiming to be from the bank’s security department, informing that a €5,000 payment is being attempted on the account. The fraudster instructs the victim to open the LuxTrust Mobile app and approve a notification to “cancel” the payment, but the approval actually authorises a transfer to the fraudster.",[14,725,726],{"v-slot:red-flags":16},[46,727,48,728,48,733,48,738,48,743,48,748,48,753,48,758,48,763],{},[50,729,730],{},[28,731,732],{},"Someone unexpectedly calls claiming to be from LuxTrust.",[50,734,735],{},[28,736,737],{},"They ask for your LuxTrust User ID, password or OTP.",[50,739,740],{},[28,741,742],{},"They ask you to approve a LuxTrust Mobile notification that you did not initiate.",[50,744,745],{},[28,746,747],{},"They ask you to scan a QR code to “secure” your account or cancel a transaction.",[50,749,750],{},[28,751,752],{},"You receive an unexpected SMS\u002Femail asking you to renew your LuxTrust certificate or update your details through a link.",[50,754,755],{},[28,756,757],{},"A supposed LuxTrust website asks for your card details, banking credentials or other confidential information.",[50,759,760],{},[28,761,762],{},"Someone tells you to make, approve or transfer a banking transaction “for security”.",[50,764,765],{},[28,766,767],{},"Someone offers to come to your home to collect your bank card, Token or authentication device.",{"title":16,"searchDepth":66,"depth":66,"links":769},[],"LuxTrust \u003Cbr> fraud","Identity fraud","Criminals impersonate LuxTrust or a bank to obtain authentication credentials or make victims approve fraudulent transactions.",{},"\u002Fen\u002Ffraud-types\u002Fluxtrust-fraud",{"title":709,"description":772},"luxtrust-fraud","en\u002Ffraud-types\u002F09.luxtrust-fraud","B6Znjfi9PGb1A4uls43sJ1EH9e8uOrIFT6qPhro8VWE",{"id":780,"title":781,"body":782,"cardTitleHtml":831,"category":832,"description":833,"extension":71,"meta":834,"navigation":73,"path":835,"redFlagsCount":147,"seo":836,"slug":837,"stem":838,"__hash__":839},"fraudTypes\u002Fen\u002Ffraud-types\u002F10.cns-fraud.md","CNS fraud",{"type":8,"value":783,"toc":829},[784],[11,785,786,796,801],{},[14,787,788],{"v-slot:description":16},[18,789,790,791,795],{},"Fraudsters impersonate the ",[792,793,794],"em",{},"Caisse Nationale de Santé"," (CNS), typically claiming that a reimbursement or administrative matter requires the victim to click a link, provide banking information, or authenticate.",[14,797,798],{"v-slot:example":16},[18,799,800],{},"The victim receives an SMS claiming to be from the CNS stating that a €280 reimbursement is awaiting payment. The message contains a link to a website resembling the CNS website and asks the victim to enter their bank-card details and authenticate with LuxTrust to receive the reimbursement.",[14,802,803],{"v-slot:red-flags":16},[46,804,48,805,48,808,48,811,48,814,48,817,48,820,48,823,48,826],{},[50,806,807],{},"Unexpected SMS or email claiming to be from the CNS and asking the victim to click a link or “update” their information.",[50,809,810],{},"A request for bank details or an IBAN to supposedly receive a reimbursement or payment.",[50,812,813],{},"A request for card details, PIN, password or authentication codes to process a CNS reimbursement.",[50,815,816],{},"A message claiming that a reimbursement is waiting but requiring the victim to pay a small “administrative” or “processing” fee first.",[50,818,819],{},"A link leading to a website that looks like the CNS website but has a different or suspicious domain.",[50,821,822],{},"Urgent language, such as “your reimbursement will expire today” or “your account will be blocked if you do not respond.”",[50,824,825],{},"A request to authenticate through LuxTrust for an unexpected reimbursement or account action.",[50,827,828],{},"A telephone caller claiming to be from the CNS who asks the victim to provide confidential information or perform a banking transaction.",{"title":16,"searchDepth":66,"depth":66,"links":830},[],"CNS \u003Cbr> fraud","Administration fraud","Fraudsters impersonate the CNS and claim that a reimbursement or administrative matter requires the victim to provide information or authenticate.",{},"\u002Fen\u002Ffraud-types\u002Fcns-fraud",{"title":781,"description":833},"cns-fraud","en\u002Ffraud-types\u002F10.cns-fraud","5xkuUkRnVbQiQWPNRd3UBTj00dFBz1vk6yVYz5Cl9jg",{"id":841,"title":842,"body":843,"cardTitleHtml":906,"category":832,"description":907,"extension":71,"meta":908,"navigation":73,"path":909,"redFlagsCount":147,"seo":910,"slug":911,"stem":912,"__hash__":913},"fraudTypes\u002Fen\u002Ffraud-types\u002F11.guichet-lu-fraud.md","Guichet.lu fraud",{"type":8,"value":844,"toc":904},[845],[11,846,847,852,857],{},[14,848,849],{"v-slot:description":16},[18,850,851],{},"Guichet.lu fraud occurs when criminals impersonate Luxembourg’s official public administration portal, typically through phishing emails or SMS, to trick victims into visiting a fake Guichet.lu\u002FMyGuichet.lu website and providing personal, banking, or LuxTrust credentials.",[14,853,854],{"v-slot:example":16},[18,855,856],{},"The victim receives a fraudulent SMS or email impersonating the Police and Guichet.lu, claiming that a traffic fine is due and directing the victim to a fake website to make the payment or provide information.",[14,858,859],{"v-slot:red-flags":16},[46,860,48,861,48,866,48,871,48,876,48,881,48,886,48,892,48,897],{},[50,862,863],{},[28,864,865],{},"An unexpected SMS claiming that the victim is entitled to a reimbursement.",[50,867,868],{},[28,869,870],{},"A message containing a link supposedly leading to Guichet.lu or MyGuichet.lu.",[50,872,873],{},[28,874,875],{},"A request to select the victim's bank and enter banking or LuxTrust credentials.",[50,877,878],{},[28,879,880],{},"A request to make a payment to receive a government reimbursement.",[50,882,883],{},[28,884,885],{},"A website that looks like Guichet.lu but uses a different URL.",[50,887,888,891],{},[28,889,890],{},"Urgent language",", such as a reimbursement expiring or an account needing immediate verification.",[50,893,894],{},[28,895,896],{},"A request for passwords, OTPs, card details or other confidential information.",[50,898,899,900,903],{},"A particularly strong Luxembourg-specific red flag is that ",[28,901,902],{},"Guichet.lu and MyGuichet.lu do not contact users by SMS","; the Luxembourg Police advises checking the URL and not clicking links in such messages.",{"title":16,"searchDepth":66,"depth":66,"links":905},[],"Guichet.lu \u003Cbr> fraud","Criminals impersonate Luxembourg's official public administration portal to steal personal, banking, or LuxTrust credentials.",{},"\u002Fen\u002Ffraud-types\u002Fguichet-lu-fraud",{"title":842,"description":907},"guichet-lu-fraud","en\u002Ffraud-types\u002F11.guichet-lu-fraud","ovWI5Wj2-wKGiRRFuiHuLzh4bH790O0P0Ywag_l7Otw",1791970015153]