Fake Emails Promising Air Conditioner Discounts: Latest Scam Alert

How the Scam Works

Criminals are sending fake emails impersonating Hornbach, a major Swiss hardware retailer, promising exclusive deals on "Breezi Pro" air conditioning units. The scam uses a multi-stage approach to deceive victims.

The Deception Process

When recipients click the button in the fake email, they experience the following stages:

1. Fake Survey Stage: Victims are directed to a fraudulent customer satisfaction survey page
2. Fake Shop Redirect: After completing the survey, they're taken to a counterfeit Hornbach online store that closely mimics the legitimate website
3. Personal Data Collection: When attempting to purchase the discounted item, victims are prompted to enter personal information including name, address, phone number, and payment details
4. Data Exploitation: The stolen information is used by criminals for unauthorized credit card charges, fraudulent purchases, and identity theft

Warning Signs to Watch For

• Unsolicited Emails: Discount offers from retailers you've never shopped with
• Artificial Urgency: Phrases like "limited time only" or "stock limited"
• Suspicious Links: Email buttons that don't clearly show the actual URL destination
• Design Inconsistencies: Slight differences in logos, fonts, or layout compared to the real website
• Poor Grammar or Spelling: Many phishing emails contain language errors

How to Protect Yourself

1. Never Click Links in Emails: Always navigate to official websites by typing the URL directly into your browser
2. Delete Suspicious Emails: Immediately move phishing emails to spam and delete them
3. Verify URLs Before Entry: Before entering any sensitive information, check that the website address is correct and uses a secure connection (https://)
4. Use Bookmarks: Save legitimate retailer websites as bookmarks to avoid accidentally visiting fake sites
5. Enable Two-Factor Authentication: Use two-factor authentication on your bank and email accounts for added security
6. Monitor Your Accounts: Regularly check your bank and credit card statements for unauthorized transactions
7. Never Share Sensitive Data: Legitimate retailers never request credit card security codes or online banking credentials via email

What to Do If You've Been Scammed

1. Block Your Cards Immediately: Contact your credit card company and bank to freeze or cancel compromised cards
2. Report to Your Bank: Inform your financial institution of the fraudulent activity and any unauthorized transactions
3. File a Police Report: Report the incident to local police or the cyber crime unit
4. Dispute Unauthorized Charges: Contact your credit card company to dispute any fraudulent transactions
5. Monitor Credit Reports: Check your credit report for signs of identity theft
6. Change Your Passwords: Update passwords for email and any online accounts, especially if similar credentials were used

Where to Report

• Swiss Cyber Crime Police: cybercrimepolice.ch
• Federal Office of Cybersecurity (BACS): bacs.admin.ch
• Consumer Protection Organizations: Local cantonal consumer protection offices
• Your Bank's Fraud Department: Contact immediately if you've shared banking details