Phishing Attack via Elster: Warning Against Fraud

A current phishing attempt has targeted the popular tax portal Elster. Cybercriminals promise users supposed tax refunds in order to steal personal data. This type of fraud is not new, but it gains credibility through the use of well-known platforms. The attackers send emails that resemble the official communications from Elster in design and language. In these messages, recipients are informed that they are entitled to a refund.

To receive this refund, users are instructed to click on a link that leads to a fake website. The counterfeit website looks deceptively similar to the real Elster site. Users are prompted to enter their personal information, including name, address, and bank details. This information can then be used for identity theft or financial fraud. Experts recommend being particularly cautious with such emails.

A sign of a phishing attempt is often the use of urgency in communication. The fraudsters try to pressure recipients into acting quickly without verifying the authenticity of the message. Additionally, security experts advise checking the URL of the website carefully. Often, fake sites can only be distinguished from the real site by small differences in the web address. Users should never click on links in emails but should directly visit the official Elster website.

The Federal Office for Information Security (BSI) has already warned about similar phishing attacks. A report from 2025 noted that phishing attacks in Germany have increased by 30%. This increase is attributed to the rising digitization and the associated dependence on online services. Security authorities recommend enabling two-factor authentication wherever possible. This additional layer of security can help prevent unauthorized access to personal accounts.

Users should also regularly check their account movements to detect suspicious activities early. In case of suspicion of a phishing attack, affected individuals should immediately inform their bank and the police. The BSI provides information and tips on its website for recognizing and avoiding phishing attacks. Educating users is a crucial step in the fight against cybercrime. The current situation underscores the need to be informed about cybersecurity risks.

The use of online services requires a high level of vigilance and critical thinking. Users should be aware that cybercriminals are constantly developing new methods to refine their attacks. The email address from which phishing messages are sent can often be spoofed. Therefore, it is important to pay attention not only to the sender's name but also to the full email address. Checking the email address can help identify fraudulent messages.

The BSI has pointed out in its current report that phishing attacks can affect not only individuals but also businesses. The financial damages from such attacks amount to several million euros annually. Combating these threats requires a joint effort from users, companies, and security authorities. Cybercrime is constantly evolving, and it is crucial for users to be informed about the latest trends and techniques.

Raising awareness of phishing attacks is an important step in protecting oneself and one's data. The BSI recommends regularly attending cybersecurity training to raise awareness of such threats. The next training session on phishing will take place on September 15, 2026.