Phishing: Private individual, Switzerland 2025
A woman sold goods on Tutti; the fraudsters had her send them to addresses of non-existent or deceased persons and asked her to activate the Twint function «receive money» via a link, which does not exist.
- Incident · 12.2025 · Switzerland
- Evidence: one media report
- Phishing
- Account takeover
- Fraud
As of
What happened
Within half an hour, unknown persons emptied her account; almost 5000 francs were missing. The perpetrators then made purchases on credit, and the woman was to be held liable for a mobile phone she never ordered.
- Affected
- Private individual (anonymous)
- Industry
- Private individual
- Loss
- almost 5000 francs plus a claim for a mobile phone never ordered
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- Link to the supposed Twint function «receive money» (sale on Tutti)
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Misuse of card, Twint, e-banking
Strangers pay with your money
Mostly limited 25 of 29 private products cover it fully, as an add-on or with limits.
-
Shipped, but never paid
Mostly no information 10 of 29 private products cover it fully, as an add-on or with limits.
-
Social media, email or shop taken over
Mostly no information 14 of 29 private products cover it fully, as an add-on or with limits.
-
Orders and accounts in your name
Mostly limited 22 of 29 private products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Twint has no «receive money» function via a link; after unauthorised account access, also check for purchases on invoice or credit in your own name.
Sources
- Nach Twint-Betrug soll das Opfer ein nie bestelltes Handy bezahlen (opens in a new window) Beobachter · 16.12.2025