Deception (social engineering): Association and foundation, Switzerland 2024
In December 2024, the NCSC received numerous reports of CEO fraud against churches, schools, associations and political parties whose websites show many names and roles.
- Incident · 12.2024 · Switzerland
- Evidence: confirmed by an authority
- Deception (social engineering)
- Fraud
As of
What happened
The emails supposedly came from the head teacher or the president of the association or party, often from addresses following the pattern firstname.lastname.companyname@outlook.com. Mostly, gift cards worth several hundred francs were requested, whose codes were to be sent by email, or urgent transfers.
- Affected
- Company (anonymous)
- Industry
- Association and foundation
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- Email in the name of the president, head teacher or priest
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
CEO fraud, diverted payment, fake invoice
Mostly add-on 5 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
In associations too: never pay or buy gift cards on the strength of an email, only after calling the president back.
Sources
- Wochenrückblick Woche 49: Kirchen, Schulen, Vereine und politische Parteien vermehrt Opfer von CEO-Betrug (opens in a new window) Bundesamt für Cybersicherheit BACS (bis 2023: NCSC) · 10.12.2024
«Besonders Kirchen, Schulen, Vereine und politische Parteien sind betroffen»