Deception (social engineering): Association and foundation, Switzerland 2022
Fraudsters found out about a sports club in advance and wrote to the treasurer in the name of the president.
- Incident · 01.2022 · Switzerland
- Evidence: confirmed by an authority
- Deception (social engineering)
- Fraud
As of
What happened
He was to pay an invoice for sports shoes. The NCSC cites the case as an example of increasingly personalised CEO fraud; it does not say whether money was paid.
- Affected
- Company (anonymous)
- Industry
- Association and foundation
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- Email in the name of the club president
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
CEO fraud, diverted payment, fake invoice
Mostly add-on 5 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
In clubs too, every payment instructed by the president needs to be checked via a second channel.
Sources
- Wochenrückblick Woche 3: Gezieltes Phishing, gezielter CEO-Betrug und ein Geschenk der NASA (opens in a new window) Bundesamt für Cybersicherheit BACS (bis 2023: NCSC) · 25.01.2022
«In einem weiteren Fall, der sich gegen einen Sportverein richtete, hatte der angebliche Präsident den Kassier angefragt, ob dieser eine Rechnung von Sportschuhen begleichen könne.»