Scammers pretend to be CSSF representatives to take money from Luxembourgers

The CSSF (Commission for the Supervision of the Financial Sector) regularly publishes reports on its website on scammers that pretend to be representatives of one company or another. The goal is always the same: to find the most gullible inhabitants of Luxembourg and take some money from them. But the current situation is unique: attackers pretend to be representatives of the Commission itself.

Potential victims receive an email with a «Customer notification» heading. It uses the CSSF logo and the organization’s real address, 283 Route d’Arlon. The letter states that it is necessary to pay a tax as soon as possible in order to unblock certain monetary transactions.

How to distinguish a letter sent by scammers from a real one? CSSF reports that the address from which the fraudulent emails come from uses the phrase commission-financier. The organization itself sends messages only from mailboxes on the @cssf.lu domain. If you received a letter from the regulator with a demand to pay some bill, check it for authenticity before transferring money!