At the moment, users are receiving emails from T-Online.de asking them to confirm their password – be careful! It's phishing!

T-Online has nothing to do with this email!

Fraudsters try to use this scam to gain access to users' personal access data .

The email reads as follows:

Screenshot by mimikama.org
Screenshot by mimikama.org

Dear [XYZ email address],

Please confirm the account password to enable better service communication. and avoid postal delivery malfunction.

Confirm the password

Note: T-Online.de is not responsible for online theft or mail malfunction after this warning and no verification response.

Thanks and greetings,
T-Online.de (C) 2018 Secure service. –
This email was sent to…. sent

Please do not reply to this email.
This automated mailbox is not monitored and you will not receive a response.

The bad spelling alone should make users suspicious. Reputable companies pay attention to writing that is easy to understand and has correct spelling.

But the hypocritical justification that confirming the password would contribute to service communication does not inspire trust.

If you click on the “Confirm password” button in good faith, you will reach the following input mask:

Screenshot by mimikama.org
Screenshot by mimikama.org

The fraudsters didn't make much effort in this case. Despite a secure connection, the web address has very little to do with T-Online. The blue colored passages such as “Forgot your password?” or “Register now” are not clickable, only the field for entering the password and the Login button are actively clickable.

Whoever is behind this fake website - it shouldn't be T-Online.

That is why the user must be particularly careful about who he gives his personal data to!

I have become a victim – what can I do?

Even with all the caution you can still fall into a trap. Once the password has been given to the fraudsters, you can still prevent something worse from happening:

  1. Contact the company for which your personal user or login information was stolen immediately. Please call customer service to have your account blocked. Banks in particular have a blocking hotline that can be reached around the clock and is available specifically for such and similar cases. Describe your case and your account or user area will no longer be accessible with the old login data.
  2. Log in to your user account and check whether you can still log in. If this is still possible, go immediately to the area where you can change your current login details. Set a new password and, if possible, also change the user name and contact address.
  3. Check immediately whether account changes or transactions have already been made , as criminals are usually very quick. Check whether, for example, goods have been purchased or debits have been made for which you are not responsible. If this is the case, inform the customer service of the respective provider immediately.
  4. Document all abnormalities . Take screenshots, print out bank statements and the phishing email, or forward the email to the company in whose name the cybercriminals sent the phishing email.
  5. Contact a lawyer who specializes in internet fraud , describe your case and submit all documents related to the fraud. You should contact the lawyer even if you have not yet reported any damage.
  6. 2 -factor authentication (if offered) prevents access even if fraudsters have obtained the access data through phishing.

By the way, there is also hope in phishing that stolen funds, for example from online banking, will be replaced by banks. The basis for this is the Civil Code. According to § 675u BGB, payment service providers are obliged to replace the stolen payment amounts in the event of unauthorized payment transactions. However, this only applies if the person concerned has fulfilled their duty of care. Further information on the legal basis in the event of damage can be found here .


If you enjoyed this post and value the importance of well-founded information, become part of the exclusive Mimikama Club! Support our work and help us promote awareness and combat misinformation. As a club member you receive:

📬 Special Weekly Newsletter: Get exclusive content straight to your inbox.
🎥 Exclusive video* “Fact Checker Basic Course”: Learn from Andre Wolf how to recognize and combat misinformation.
📅 Early access to in-depth articles and fact checks: always be one step ahead.
📄 Bonus articles, just for you: Discover content you won't find anywhere else.
📝 Participation in webinars and workshops : Join us live or watch the recordings.
✔️ Quality exchange: Discuss safely in our comment function without trolls and bots.

Join us and become part of a community that stands for truth and clarity. Together we can make the world a little better!

* In this special course, Andre Wolf will teach you how to recognize and effectively combat misinformation. After completing the video, you have the opportunity to join our research team and actively participate in the education - an opportunity that is exclusively reserved for our club members!


Notes:
1) This content reflects the current state of affairs at the time of publication. The reproduction of individual images, screenshots, embeds or video sequences serves to discuss the topic. 2) Individual contributions were created through the use of machine assistance and were carefully checked by the Mimikama editorial team before publication. ( Reason )