Spotting email scams: The most common and dangerous scams, and how to protect yourself

A message from the bank, an allegedly unpaid bill or a parcel that could not be delivered: fraudulent emails have long been part of everyday digital life. But the methods used by criminals are becoming increasingly sophisticated. We’ll show you which scams are particularly common, how to spot dangerous messages and how you can protect yourself effectively.

Email fraud: an underestimated danger

Almost everyone has come across them: emails promising an unexpected prize, warning of an account being blocked, or demanding immediate payment of a bill.

Whilst fraudulent messages used to be easily recognisable by their poor translations, obvious spelling mistakes or unusual layout, modern scams often appear deceptively genuine.

Criminals mimic the appearance of well-known companies, use fake sender addresses and create professionally worded messages. With the help of artificial intelligence (AI), they can also personalise their fraudulent attempts.

The aim is almost always the same: to trick recipients into revealing personal information, entering login details, opening malicious files or transferring money.

Particularly dangerous: these days, a fraudulent email need not contain any spelling mistakes, nor does it have to come from an obviously suspicious address.

⸻

1. Phishing: When fraudsters try to steal your login details

Phishing is one of the best-known and most widespread forms of email fraud.

In these scams, criminals pose as trustworthy organisations, such as a bank, an email provider, an online shop or a government agency.

This is how the scam works

You will receive an email containing an urgent request:

«For security reasons, your account has been temporarily suspended. Please verify your identity within 24 hours to lift the suspension.»

A link leads to a website that looks strikingly similar to the original.

If you enter your username and password there, this information will end up directly in the hands of the fraudsters.

In some cases, credit card details or security codes may also be requested.

How can you spot phishing?

• The message creates a sense of urgency or threatens consequences.
• You are asked to enter personal details or passwords.
• The link provided leads to an unusual web address.
• The sender’s address does not match that of the alleged company.
• You are unexpectedly asked to confirm your identity.

How to protect yourself

Always access your bank’s or service provider’s website directly via the familiar web address or the official app.

Do not use links from unexpected emails to log in to important accounts.

You should also enable two-factor authentication. This means that a stolen password alone is often not enough to gain access to your account.

⸻

2. Fake parcel notifications: A small fee with major consequences

Are you expecting a parcel? That’s exactly what fraudsters are counting on.

Fake notifications sent in the name of parcel delivery services are among the most common types of phishing scam.

This is how the scam works

For example, you might receive the following message:

«Your parcel could not be delivered due to an incomplete address. Please update your delivery address and pay the processing fee of CHF 1.95.»

The link provided leads to a fake website.

You will be asked to provide your address and credit card details there.

This supposedly small fee is merely a pretext for obtaining your payment details.

How can you spot a scam?

• You will receive an unexpected delivery notification.
• A small additional payment is required.
• The link does not lead to the parcel service’s official website.
• The message does not contain a valid tracking number.
• You are requested to make payment immediately.

How to protect yourself

Please check the parcel status exclusively via the parcel service’s official website or app.

Never enter your credit card details on a website that you have accessed via a suspicious link.

⸻

3. Fake invoices: When money ends up in the wrong account

This scam is particularly dangerous for businesses, organisations and the self-employed.

In what is known as ‘invoice manipulation fraud’, criminals attempt to divert legitimate payments into their own bank accounts.

This is how the scam works

A company receives an invoice from a supplier it knows.

Shortly afterwards, another email arrives:

«Due to a change in our bank details, we would ask you to transfer the outstanding invoice to the account below.»

The message appears credible. In some cases, it even contains genuine invoice numbers, known contact persons and previous email correspondence.

In particularly dangerous cases, the perpetrators have previously gained access to a genuine email account.

How can you spot a scam?

• A business partner unexpectedly provides new bank details.
• An invoice that has already been received is being corrected.
• Payment should be made particularly quickly.
• Notification of the change will be sent exclusively by email.

How to protect yourself

Please confirm any unexpected changes to your bank details by telephone, using a number you already know.

Do not use the telephone number provided in the suspicious message for this purpose.

Companies should also introduce clear payment authorisation procedures and the dual-control principle.

Important: Even an email from an address you actually recognise is not sufficient proof of authenticity. The email account in question may have been compromised.

⸻

4. CEO fraud: When fraudsters pose as senior managers

In what is known as ‘CEO fraud’, criminals pose as managing directors, line managers or other senior executives.

This method is aimed specifically at staff in the accounts, administration and secretarial departments.

Clubs, church parishes and other organisations may also be affected.

This is how the scam works

An employee appears to receive an email from her line manager:

«I’m in an important meeting at the moment. Please transfer CHF 8,500 to the following account as a matter of urgency. This is a confidential matter. I’ll be in touch later.’

The fraudsters deliberately rely on authority, time pressure and secrecy.

Sometimes, employees are asked instead to buy gift vouchers and send the relevant codes.

How can you spot a scam?

• The instruction is unusual or conflicts with internal procedures.
• Immediate payment is required.
• The matter is to remain confidential.
• The alleged line manager cannot be contacted for further enquiries.
• The payment is to be made to an unknown account.

How to protect yourself

Always check any unusual payment instructions in person or by telephone.

Even an alleged instruction from senior management must not override established security procedures.

⸻

5. Malware in an attachment: The dangerous bill

Not every fraudulent email is intended to steal money or passwords straight away.

Some messages are designed to install malware on your computer.

This is how the scam works

You will receive an email with the subject line:

«Your October invoice – payment outstanding»

The attachment is said to contain an invoice or an important document.

In fact, the file may contain malicious programmes or trick you into enabling dangerous functions.

Possible consequences include:

• Theft of stored passwords
• Spying on personal data
• Remote access to the computer
• Encryption of files by blackmail software (ransomware)
• The spread of malware within a corporate network

How can you spot a scam?

• You receive an unexpected bill.
• The sender is unknown or unusual.
• The message urges you to open an attachment straight away.
• A file requires macros or other security exceptions to be enabled.
• The attachment contains unusual file formats, such as executable files or scripts.

How to protect yourself

Do not open any unexpected attachments whose origin you cannot reliably verify.

Keep your operating system, browser and security software up to date.

Make regular backups of your important data and keep at least one backup separate from the production system.

Important: PDF and Office files are not necessarily safe either.

⸻

6. Blackmail emails: Alleged recordings and compromising information

One particularly unpleasant scam preys on people’s fears and feelings of shame.

Criminals claim to have hacked your computer and taken compromising photographs.

This is how the scam works

For example, the message reads:

«I have gained access to your webcam and recorded you whilst you were engaged in private activities. If you do not pay within 48 hours, I will send the video to all your contacts.»

Perpetrators often demand payment in cryptocurrencies.

To appear more credible, they sometimes quote a real but outdated password from a previous data breach.

How can you spot a scam?

• The message contains general threats.
• No verifiable evidence is provided.
• Payment is to be made in cryptocurrencies.
• The pressure of time is being ramped up to extreme levels.
• An old password is being used as supposed evidence of recent access.

How to protect yourself

Do not pay and do not reply to the blackmail message.

If any of the passwords listed are still in use, please change them immediately across all affected services.

Enable two-factor authentication.

Keep the message as potential evidence.

The claim that footage exists is not in itself proof of this. Nevertheless, concrete evidence of an actual attack should be taken seriously and investigated.

⸻

7. Promises of winnings and inheritance scams: big money as bait

This type of fraud has been around for many years, but it is still effective.

The perpetrators promise large sums of money, supposed inheritances or unexpected winnings.

This is how the scam works

For example, you might receive a message:

«Congratulations! You have been selected as the winner of CHF 250,000. To pay out the prize, we simply need your personal details and a processing fee.’

The first payment is often followed by further claims.

Sometimes they demand alleged taxes, sometimes notary fees or charges for international bank transfers.

The money that was promised does not exist.

How can you spot a scam?

• You win a competition you’ve never entered.
• A stranger promises you a large inheritance.
• You must transfer money before you can receive a payout.
• They are being asked to provide personal documents or bank details.

How to protect yourself

As a general rule, be wary of unexpected promises of money.

Anyone who is asked to pay money up front in order to receive an alleged prize should assume that this is an attempt at fraud.

⸻

8. Fake emails from public authorities: Scams using official logos

Fraudsters deliberately exploit people’s trust in state institutions.

To this end, they send messages purporting to be from tax authorities, the police, customs or other government agencies.

This is how the scam works

For example, an email may inform you about an alleged tax refund:

«Your tax assessment has been corrected. You are due a refund of CHF 428.50. Please confirm your bank details.»

Other variants carry the risk of criminal proceedings, fines or legal consequences.

The logos, names and documents used can look very professional.

How can you spot a scam?

• A public authority unexpectedly requests sensitive data.
• There are threats of immediate legal consequences.
• You are to initiate a payment via a link.
• This web address is not that of the official government website.

How to protect yourself

Please contact the relevant authority via its official website or a telephone number you have found yourself.

Do not rely solely on logos, signatures or documents that appear to be official.

⸻

9. QR code phishing: When the scam is hidden behind an image

One increasingly prevalent variant is ‘quishing’, a combination of QR codes and phishing.

The dangerous link is not actually contained directly in the body of the email, but is hidden within a QR code.

This is how the scam works

You will receive an email containing a QR code and the following message:

«Scan this code to verify your user account.»

After scanning, a fake login page opens.

On that page, you will be asked to enter your login details, credit card details or other sensitive information.

Why is this method dangerous?

With a normal link, you can often check the destination address before clicking on it.

With a QR code, however, the destination is not immediately apparent.

Furthermore, such messages can bypass some automated security checks.

How to protect yourself

Do not scan any unexpected QR codes from emails.

Check the destination address displayed before opening a web page.

As a general rule, log in to important services via the official app or by entering the web address yourself.

⸻

10. AI-powered fraud: When fake emails are almost impossible to spot

Artificial intelligence is also changing the methods used by cybercriminals.

In the past, many fraudulent messages were easy to spot because of their poor German or unnatural phrasing.

Nowadays, AI can be used to create compelling messages in almost any language in a matter of seconds.

This is how the scam works

Fraudsters can analyse publicly available information and use it to create personalised messages.

For example, you may receive an email referring to your employer, your job role or a business partner you know.

The message is linguistically flawless and comes across as credible.

In particularly sophisticated attacks, fake voices or videos are also used to confirm a person’s alleged identity.

How can you spot a scam?

When it comes to AI-powered attacks, traditional indicators such as spelling mistakes are becoming less and less useful.

It is therefore the content that is crucial:

• Is the request reasonable?
• Were you expecting this message?
• Should an unusual payment be initiated?
• Is confidential information required?
• Is pressure building up?
• Can the enquiry be independently verified?

How to protect yourself

Do not rely solely on professional wording, a familiar voice or an identity that seems familiar.

Always verify any unusual requests via a second, independent channel of communication.

⸻

The key warning signs: How to spot fraudulent emails

Although the methods differ, many fraudsters use similar psychological tricks.

1. Artificial time pressure

Phrases such as «Act within 30 minutes» or «Final warning» are intended to prevent you from questioning the message critically.

2. Threats and fear

Account freezes, criminal charges, data loss or high fees are used as a means of exerting pressure.

3. Unusual sender addresses

Please check not only the name displayed, but also the full email address.

An address such as [email protected] is not automatically trustworthy simply because it contains the name of a well-known bank.

But be careful: even sender addresses that look legitimate may be fake or belong to compromised accounts.

4. Suspicious web addresses

Look out for slightly different spellings and additional terms.

For example, my-bank.example is not the same as my-bank.example.fraud.test.

The crucial factor is which actual domain the link leads to.

Even the padlock icon, or HTTPS on its own, is not proof that a website is trustworthy.

5. Unexpected requests for payment

New bank details, unusual payment methods and last-minute changes to existing invoices are particularly cause for concern.

6. Requests for the disclosure of sensitive data

Passwords, credit card details and verification codes should not be included in an email reply.

Do not enter such information on websites whose authenticity you have not verified.

7. Unusual attachments

Unexpected bills, alleged reminders or documents containing requests to activate additional features should be examined with particular care.

⸻

10 simple rules for greater security in your day-to-day email use

By following a few basic guidelines, you can significantly reduce the risk.

1. Do not click on links without thinking.
First, check whether you were expecting the message and whether the request seems plausible.

2. Check the the actual sender.
A well-known display name is no guarantee of authenticity.

3. Open important websites directly.
Use the official app, a saved bookmark or a web address you have entered yourself.

4. Enable two-factor authentication.
Where possible, please use passkeys or other phishing-resistant login methods.

5. Use a different password for each account.
A password manager helps you to create secure and unique passwords.

6. Do not open any suspicious attachments.
Especially not if you weren’t expecting the message.

7. Keep your devices up to date.
Install security updates for operating systems, browsers and programmes.

8. Check any unusual payment requests.
Call the person in question using a telephone number you already know.

9. Don’t let yourself be pressured.
An urgent request is no reason to bypass security checks.

10. Trust your healthy scepticism.
If a message seems unusual, check it independently before taking any action.

⸻

What should you do if you’ve already fallen for a fraudulent email?

Even if you’re very careful, you may still end up opening a dangerous link or revealing personal information.

The key is to react as quickly as possible.

If you have entered a password

Change the affected password immediately via the service’s official website.

If you use the same password for other services, please change it there as well.

Enable two-factor authentication and check your active sessions and stored recovery information.

If you have provided your credit card details

Please contact your bank or credit card provider immediately.

If necessary, have the card blocked and check your account transactions.

If you have transferred money

Please contact your bank immediately.

In some circumstances, it may still be possible to stop a transfer or attempt to retrieve the funds.

If you have suffered financial loss, report it to the police.

If you have opened a suspicious attachment

Do not open any further files or carry out any additional instructions contained in the message.

If you suspect that malware has been executed, disconnect the affected device from the network and let us examine it.

If the device is for business use, you should also contact us immediately.

If you have simply clicked on a link

A single click does not automatically mean that your device has been infected or your account compromised.

The key factor is whether you subsequently entered data, downloaded a file or ran a programme.

If you are unsure, you should check the device and, if necessary, seek expert assistance.

⸻

Reporting fraudulent emails in Switzerland

In Switzerland, suspicious messages and cyber incidents can be reported to the Federal Office for Cyber Security (BACS).

Reports like these help to identify new waves of fraud and warn the public.

Further information can be found on the official website of the Federal Office for Cyber Security.

If you have already suffered financial loss, you should also contact your bank and report the matter to the police.

⸻

Conclusion: The best defence is vigilance

Email scams are becoming increasingly sophisticated.

These days, fake messages often look exactly like genuine communications from banks, companies or public authorities. Artificial intelligence makes it even easier for criminals to create convincing and personalised attempts at fraud.

That is why it is no longer enough to simply look out for spelling mistakes or suspicious sender addresses.

The most important security rule is: do not trust an email simply because it looks genuine.

Be wary of unusual requests, use secure login procedures and never allow yourself to be pressured into making hasty decisions.

After all, the most effective protection against email fraud consists of a combination of technical security measures, a healthy dose of scepticism and a mindful approach to digital messages.

If in doubt, remember: it’s better to ask once too many times than to click once too soon.