Phishing: Private individual, Switzerland 2022
A man searched for the name of his crypto trading platform in a search engine and clicked on the first result, an identical-looking fake with a similar domain.
- Incident · 02.2022 · Switzerland
- Evidence: confirmed by an authority
- Phishing
- Account takeover
As of
What happened
There he entered his login, password and second factor. At the same time, the fraudsters logged in to the real platform and emptied his account.
- Affected
- Private individual (anonymous)
- Industry
- Private individual
- Loss
- Account emptied, amount not stated
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- fake trading platform as the first result (advert) in the search engine
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Social media, email or shop taken over
Mostly no information 14 of 29 private products cover it fully, as an add-on or with limits.
-
Hotline and advice before anything happens
Mostly no information 14 of 29 private products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Never open logins via search engine adverts; use a saved bookmark instead.
Sources
- Wochenrückblick Woche 5: Wenn der erste Google-Treffer nicht der richtige ist und eine Gratisnummer in einen Betrug mündet (opens in a new window) Bundesamt für Cybersicherheit BACS (bis 2023: NCSC) · 08.02.2022
«Die Betrüger haben sich mit diesen Daten gleichzeitig in sein Konto auf der richtigen Webseite eingeloggt und konnten so das Konto leerräumen.»