Phishing: Private individual, Switzerland 2025
A woman from Basel wanted to sell a children’s toy on Tutti.ch; supposed buyers sent a manipulated link to a fake portal.
- Incident · 2025 · Basel, Switzerland
- Evidence: one media report
- Phishing
- Account takeover
As of
What happened
In this way, they gained access to her Twint account, changed the access code and, in around 70 transactions mostly of 250 francs, debited around 20'000 francs within half an hour. PostFinance initially did not respond, but after an intervention by SRF agreed to a partial refund.
- Affected
- Private individual (anonymous)
- Industry
- Private individual
- Loss
- CHF 20'000
- Figure given by the source
- around 20'000 francs, partly refunded
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- manipulated link from a supposed buyer on Tutti.ch
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Misuse of card, Twint, e-banking
Strangers pay with your money
Mostly limited 25 of 29 private products cover it fully, as an add-on or with limits.
-
Shipped, but never paid
Mostly no information 10 of 29 private products cover it fully, as an add-on or with limits.
-
Social media, email or shop taken over
Mostly no information 14 of 29 private products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Report unusual debits to the bank immediately and be persistent: here, a partial refund was only obtained after pressure.
Sources
- Baslerin wird innert Minuten um 20'000 Franken beraubt (opens in a new window) blue News · 11.08.2025