Phishing
Phishing is a commonly used method by criminals to steal personal information and login credentials. By posing as trustworthy entities, such as iDEAL, they attempt to deceive you into clicking on links or sharing personal details. Recognising phishing attempts is crucial to keep your financial and personal information safe. iDEAL is committed to informing you about how to recognise and prevent these fraudulent activities. Together, we can fight against phishing and make your online experience safer.
Active phishing emails using the iDEAL name
There are currently multiple phishing campaigns in circulation that fraudulently present themselves as iDEAL or as part of the transition to iDEAL | Wero. These emails are not sent by iDEAL.
We regularly receive reports from consumers who are unsure whether a message is genuine. Below, we explain how to recognise phishing emails and what to do if you receive one.
How to recognise fake iDEAL emails
Phishing emails using the iDEAL name often contain one or more of the following elements:
- A sense of urgency, often linked to a fixed deadline
- Claims about mandatory verification, “account suspension” or “PSD2 checks”
- A button or link asking you to confirm your identity
- A sender address that does not end in @ideal.nl
- Instructions to activate Wero outside your own bank’s secure environment
iDEAL will never ask you by email to verify your identity, confirm personal details or activate a payment service.
Examples of current phishing emails
On this page, we show examples of phishing emails that are currently being reported. If you receive an email that closely resembles these examples, you can safely assume it is fraudulent.
As phishing campaigns change frequently, we also refer you to the Dutch Fraud Helpdesk, which maintains an overview of current fake emails:
👉 https://www.fraudehelpdesk.nl/actuele-valse-emails
What should you do?
- Do not click on links or open attachments
- Do not share personal or banking details
- Delete the email or report it to your own bank
- If in doubt, always check this page first
iDEAL does not reply individually to phishing reports by email. Reports are used to monitor fraud patterns and improve consumer awareness.
What is phishing?
Criminals send you an email message to obtain your login details. This could be, for example, by asking you to click on a link in the email or to enter your login details on a website that appears to be that of a company you trust. This information can be used for various purposes, such as withdrawing money from your bank account or committing identity fraud.
Phishing or Smishing?
Phishing via SMS or Whatsapp is called 'smishing'. An example is if you receive a text message asking you to make a payment with iDEAL for a product or service you did not order or request.
Recognising Phishing
What should you look out for?
- You are often not addressed personally;
- You do not know the sender or have not ordered the product being referred to;
- Poor, deficient, or unclear use of language;
- You are asked to click on a link and/or fill in your personal details such as name, address, and login information. Note: iDEAL will never ask you to provide your login details via email.
- You are asked to respond or act urgently or as soon as possible to the request in the message.
- If the email or SMS/Whatsapp contains a link and you hover over it with your mouse - without clicking - you will see a website address that does not match the sender.
Reporting Phishing
Have you received a phishing email in the name of iDEAL or are you unsure whether it is a phishing message? Do not click on any links in the message and do not enter your personal details, login codes, or other data that identifies you as a person. Then, forward your email to valse-email@ideal.nl and delete the message. You can also report smishing here. In that case, send a screenshot or photo of the message you received.
What can you do if you have clicked on a link?
If you have entered a password, PIN, verification code, or personal details, please contact your bank.
Report Suspicious Website
Have you come across a website that suspiciously associates itself with the iDEAL brand? We kindly request that you refrain from interacting with this site.
To protect you and others, we kindly ask you to report this to us. After review, we will take any necessary actions, together with our brand abuse vendor, Corsearch, to mitigate any potential threats.
