On the Willhaben online marketplace, sellers are tricked into disclosing personal data via phishing attacks, with enormous consequences for those affected.

Private correspondence as a means to an end

Willhaben itself blocks every external link in the app for security reasons and enables the transaction to be concluded without having to resort to other platforms or communication options. In order to get to the personal data of the sellers, it is necessary to first lure the victims out of the secure chat. They receive a corresponding link via WhatsApp, SMS or email to access sensitive information or to install malware on the device unnoticed.

Transfer failed

It becomes particularly dangerous when the provider of a product is asked for his account details in order to carry out a supposed test transfer, which - what a surprise - fails. More information is then requested until the bold fraudsters can gain access to the account themselves. Very great pressure is often put on the victims in order to put them in further distress.

What is particularly complex, but very effective, is redirecting to a perfectly replicated bank page where the victims are supposed to enter their data. Often these only differ in a slightly different URL, i.e. minimal differences in the web address.

Refund warranty?

According to Willhaben's head of security, Michael Gawanda, such attacks no longer involve local petty criminals, but rather international fraud groups that target online marketplaces around the world.

Unfortunately, anyone who has fallen victim to such fraud has very little chance of getting their money back. Even if the clearance rates are very modest, such a crime should definitely be reported to the police immediately.

Detect phishing attacks

Nobody is safe from a phishing attack. All it takes is a moment of inattention and you fall into a trap. Therefore, it is extremely important not to share your personal and sensitive information lightly and reveal it online. The question of necessity is always central here.

As already mentioned, there is no need to switch to any other communication platform when selling via willhaben.at. For security reasons, the trading platform automatically hides information such as the provider's phone number to make it more difficult for fraudsters to contact you via WhatsApp or SMS. If you receive a private request, you should try to call the sender directly. If the message comes from phishing groups, a call often goes unanswered.  

If someone requests a test transfer, the IBAN is absolutely sufficient. In addition, there is no reason for the provider to switch to a payment option other than the one he or she has chosen. The company's own payment system Paylivery enables secure payment processing. The money is parked at Willhaben and only transferred when the goods have actually arrived at the recipient.

If the provider asks for identification documents, contact should be broken off immediately. These are used for identity theft. If the Willhaben chat recognizes such a request, it responds with a corresponding warning.  

Respond immediately

The first step is to contact your bank immediately. As long as the incorrect transfer has not yet been completed, it is still possible to stop it. However, once the money has already made its way, it is almost impossible to reverse the transaction.

As already mentioned, the fraud should also be reported. As a precautionary measure, all passwords should be changed and a virus scan may also be carried out.

More scams

Another relatively common scam is transport cost fraud. Sellers are asked by interested parties to advance the transport costs for the goods. A refund will be made immediately after receipt of the goods. The provider is redirected to a link from an alleged delivery service through which he pays the transport costs. Ultimately the money is gone and the goods are not picked up.

Source: futurezone

You might also be interested in:
Classifieds: Enough fraud!
Have you been a victim of phishing? You should do these things now!


If you enjoyed this post and value the importance of well-founded information, become part of the exclusive Mimikama Club! Support our work and help us promote awareness and combat misinformation. As a club member you receive:

📬 Special Weekly Newsletter: Get exclusive content straight to your inbox.
🎥 Exclusive video* “Fact Checker Basic Course”: Learn from Andre Wolf how to recognize and combat misinformation.
📅 Early access to in-depth articles and fact checks: always be one step ahead.
📄 Bonus articles, just for you: Discover content you won't find anywhere else.
📝 Participation in webinars and workshops : Join us live or watch the recordings.
✔️ Quality exchange: Discuss safely in our comment function without trolls and bots.

Join us and become part of a community that stands for truth and clarity. Together we can make the world a little better!

* In this special course, Andre Wolf will teach you how to recognize and effectively combat misinformation. After completing the video, you have the opportunity to join our research team and actively participate in the education - an opportunity that is exclusively reserved for our club members!


Notes:
1) This content reflects the current state of affairs at the time of publication. The reproduction of individual images, screenshots, embeds or video sequences serves to discuss the topic. 2) Individual contributions were created through the use of machine assistance and were carefully checked by the Mimikama editorial team before publication. ( Reason )