Phishing, fake parcel SMS and phone scams
To verify This page has 1 item that could not be confirmed on an official page. Check it yourself before relying on it:
How to spot fake emails and SMS (parcel fees, bank, TWINT), fake police or authority calls and tech-support scams, where to report them, and what to do if you already paid.
Key facts
- The Post never asks for passwords, SMS codes or full credit card details by email, SMS or WhatsApp, and does not threaten you or set extremely short deadlines (post.ch).
- Check parcels only on post.ch or the official Post app, never through a link in a message.
- Real police never call you from 117, their emergency number; caller numbers can be faked (Vaud police / Swiss Crime Prevention).
- Report suspicious messages to the Federal Office for Cyber Security (FOCS/OFCS, formerly NCSC) online form, or forward phishing to reports@antiphishing.ch.
- If you paid or gave card details: call your bank or card issuer at once to block the card, change your passwords, then file a complaint with the police.
1. Common scams
Fake parcel SMS or email (Post, DHL and others)
A message says a parcel is held, overweight or waiting for customs or delivery fees, with a link to pay a small amount. The fake site copies the Post's logo and then asks for your card details and an SMS code or SwissID confirmation. The data is used for card fraud (cybercrimepolice.ch).
Signs the Post lists: a short deadline ("24 heures"), "colis retenu dans le terminal", a request to send an SMS code, a premium 0901 number, links that look like the Post but are not on post.ch, poste.ch, posta.ch, swisspost.ch or swisspost.com. The same pattern is used with other courier names.
Real parcels and customs charges: see Parcels, pick-up and the Post.
Fake bank, card or TWINT messages and calls
- An email, SMS or call says there is a problem with a payment, your account will be blocked, or the e-banking system was updated. The aim is to get your login, a code or a transfer.
- OFCS: no bank or card issuer asks you to change your password or check card details by email. Be wary of threatening calls (loss of money, criminal complaint, blocked account or card).
- Never confirm a payment or login in your banking or TWINT app that you did not start yourself.
Your bank's real contact details: on your card and in your bank's app. See Bank practicalities. For paying real bills safely: Swiss QR-bill and eBill.
Fake police or authority calls
- Callers pretend to be police, a relative or an official and tell an urgent, dramatic story to get money.
- Police never contact you from 117. Hang up and call the police yourself on 117 if in doubt.
- Ask questions a stranger cannot answer. Never hand over cash, cards or valuables to someone who comes to collect them.
Tech-support scams
Callers pose as Microsoft, Apple or other support staff, say your computer has a problem, and ask you to install remote-access software. Once in control, they cause damage to get money (cybercrimepolice.ch). Hang up; never give remote access to an unsolicited caller.
2. How to report
| What | Where |
|---|---|
| Phishing email, SMS or website (no reply needed) | Forward to reports@antiphishing.ch or enter the link on antiphishing.ch (OFCS) |
| Any cyber incident, with an automatic first assessment | OFCS report form (report.ncsc.admin.ch) |
| Scam case for the police network | cybercrimepolice.ch "Signaler un événement" |
| You lost money or data was misused | Criminal complaint with the police (see below) |
| Acute emergency | 117 (police) or 112 |
OFCS says its form is not handled 24 hours a day and that it cannot register criminal complaints.
Criminal complaint in Vaud: at a police station, or online through Suisse ePolice for the few offences it covers. Steps, documents and what to bring: Police report and complaint in Vaud.
3. If you clicked, paid or gave data
- Card or bank data given, or money paid: contact your bank or card issuer immediately to block the card and e-banking. Ask whether a payment can still be stopped; whether you get money back depends on your bank: To verify with your bank.
- Password entered: change it at once, and on every other service where you used the same one. Turn on two-factor authentication.
- Check your accounts for unknown activity.
- Keep evidence: screenshots, the SMS or email, the sender, links, payment receipts.
- File a complaint with the police (cybercrimepolice.ch advises booking by phone first, then going to the nearest cantonal police station). See Police report and complaint in Vaud.
- Remote access given: OFCS says to uninstall the remote-access program immediately and change all passwords you use on that device (OFCS, Phishing).
Bought something online that arrived faulty, or a doorstep or phone sale you regret: see Faulty goods, warranty and returns under Swiss law.
Want to know what data a company holds about you, or how it got your number? See Your data rights: asking what a company or office knows about you.