German Healthcare Fraud Surges; International Takedown of "Kratos" Phishing Service

Rising Healthcare Fraud in Germany

According to statistics released by AOK Hessen, notifications of healthcare fraud increased by 10% to 1,232 cases between 2024 and 2025, with confirmed claims totaling approximately €4.8 million. A total of 195 criminal charges have been filed. The most severely affected sector is pharmaceuticals and medical supplies, with €1.8 million in damages. One medical supplier was forced to repay €857,000 after prescription forgery was discovered. Irregularities have also been identified in nursing insurance and physiotherapy services, including a nursing fraud case involving family members that caused €72,000 in damages and 44 forged physiotherapy orders totaling €12,000.

International Dismantling of "Kratos" Phishing Service

The German Federal Criminal Police (BKA), in cooperation with the FBI and Indonesian authorities, successfully shut down the "Kratos" phishing service. Operating since 2024, this platform provided comprehensive infrastructure for cybercriminals. Investigators seized 200 servers and secured approximately 96,000 phishing apps. The service had approximately 1,800 customers conducting up to 15,000 fraud campaigns monthly. The significance of this takedown is evident in current crime statistics: SMS fraud increased 146% in the first half of 2026, support fraud rose 134%, and remote access trojan attacks increased 69%.

Current Fraud Schemes and How to Identify Them

Banking Phishing

Sparkasse customers are increasingly targeted with phishing emails claiming to be "security updates." Legitimate banks will never:

• Request account information or passwords via email as a first contact
• Threaten immediate account closure via email
• Ask you to click links in emails to verify account information

Prevention: Do not click email links. Instead, visit the official website directly by typing the address into your browser or calling the customer service number from an official bank statement.

Health Insurance Impersonation

Legal health insurance members receive fraudulent emails claiming to require "health card updates." These emails use legitimate company names but direct victims to phishing sites designed to steal personal information. Genuine insurers do not request personal data updates via email.

Multi-Channel German Pension Insurance (DRV) Fraud

Fraud impersonating the German Pension Insurance combines multiple attack vectors:

1. Phishing emails - Sent from spoofed official addresses
2. Phone calls - Callers request personal information under false pretenses
3. Unannounced home visits - Individuals claiming to be DRV employees appear at residents' doors

DRV emphasizes: Legitimate visits are always scheduled in advance and accompanied by official identification. Do not allow unannounced visitors inside your home.

Fraudulent Subscription Charges

The Baden-Württemberg Consumer Center warns of a Hong Kong-based company sending invoices for approximately €200 for never-subscribed services (nutrition coaching, AI assistants, etc.) under various brand names.

Response: Do not pay. Submit written objection to the demand.

Protection Measures

• Never click suspicious links - Always navigate directly to official websites by typing addresses yourself or using bookmarks
• Official institutions never request sensitive data via email - If you receive such requests, contact the organization directly using a verified phone number
• Verify caller identity independently - Do not accept phone numbers provided in unsolicited emails or calls
• Verify medical information - Consult only qualified healthcare professionals; social media is not a reliable medical information source
• Require advance notice for home visits - Legitimate institutions always arrange visits in advance with proper identification

Where to Report

If you suspect fraud, report it to your state consumer protection center (Verbraucherzentralen) or local police immediately. Do not make payments to suspicious invoice senders.