Scams in Germany: How to Spot & Avoid Fraud as a Foreigner (2026)

Germany feels safe and it largely is. But when it comes to online and financial fraud, the country is not as immune as people assume. In 2025, online fraud cost Germans over €22 billion, up 18% from the previous year (BKA Cybercrime Report 2025). And if you’re a foreigner still learning how things work here, you can be an easier target.

Here’s everything you need to know — including the newest scams using AI that most people haven’t heard of yet.

The Bank Letter with a QR Code (Quishing)

This is the most sophisticated scam doing the rounds right now. You receive a letter that looks completely official — Sparda-Bank, Sparkasse, or Volksbank letterhead, professional formatting, even a real-sounding name at the bottom. It tells you to scan a QR code to update your SecureGo app or activate a new security feature.

Don’t scan it.

This is called Quishing — QR code phishing. Scanning takes you to a fake bank website where you enter your login, PIN, and TAN codes. By the time you realise something is wrong, your account may already be drained.

Your real bank will never ask you to scan a QR code from a letter to update an app. If you receive something like this, call your bank directly using the number from their official website — not the one printed in that letter.

You get a WhatsApp message from an unknown number: “Hey, it’s me. I changed my phone number. Please save this.” Then, a day or two later, they ask you to transfer money urgently for some emergency.

This is Germany’s most reported scam — the digital version of the old Enkeltrick (grandchild scam). In 2025 alone, this WhatsApp variant caused over €300 million in losses (BKA). The moment anyone asks for money after claiming a new number, stop and call the original number to verify.

Parcel SMS Scams — DHL and Hermes

A text arrives from “DHL” or “Hermes” saying your package is held and you need to click a link to pay a small customs fee or reschedule delivery. The link either harvests your card details or installs malware on your phone.

Real rule: DHL and Hermes never ask for payment via SMS link. Always track packages directly on the official website.

Fake Job Offers on WhatsApp and Telegram

You receive a message offering easy part-time work — rating products, liking posts, completing micro-tasks. You earn small amounts at first to build trust. Then you’re asked to invest your own money to activate higher earnings. That money disappears.

These are especially common in cities with large international student populations. If someone offers you money for easy phone work without a contract or an official company, it’s a scam.

You find a beautiful flat at a surprisingly fair price on WG-Gesucht or a Facebook group. The landlord is currently abroad and asks for a deposit before the viewing, or claims to ship you the keys by post. Once you transfer the money, contact stops.

In Germany, no landlord can legally charge you a viewing fee or demand a deposit before you’ve signed a contract and physically visited the property. If someone asks for money before you’ve met them in person — walk away.

You find a website selling branded goods at incredibly low prices. The website looks real, has photos, even reviews. You pay, and either nothing arrives or you receive a cheap imitation.

Always check the website for an Impressum (legal notice with company address and registration) — German law requires it for any commercial website. No Impressum is an immediate red flag. You can also use the Verbraucherzentrale’s free Fake-Shop-Finder at fakeshop-finder.verbraucherzentrale.de.

You see an ad on Instagram or Facebook — a celebrity endorsing a trading platform with guaranteed high returns. Or someone in a WhatsApp or Telegram group shares impressive profit screenshots and invites you to join.

These are classic investment fraud setups. Once you deposit money, withdrawals become impossible — there are always fees or verification steps blocking you. Average victim loss: €25,000 (BKA 2025). Never invest through a platform you found via social media without first checking its licence on BaFin’s official database at bafin.de.

AI Voice Cloning — The Newest Scam in 2026

This one is new and spreading fast. Scammers now use AI tools to clone someone’s voice using just a few seconds of audio from a public video or post. You receive a phone call that sounds exactly like your parent, sibling, or friend — asking for urgent money.

Researchers confirmed in 2026 that AI-cloned voices have crossed the indistinguishable threshold — most people cannot tell them apart from the real person. If you receive an unexpected call from someone asking for money under pressure, hang up and call that person back on their known number before doing anything.

How to Spot Any Phishing Attempt

Whether it’s an email, SMS, letter, or WhatsApp message — almost every scam has the same tells. Train yourself to notice these:

• The email address or website domain is slightly off. Your bank’s real domain is sparkasse.de. The scam email comes from sparkasse-sicherheit.net or sparkasse-support.com. Always check the actual address, not just the display name.
• Your name is wrong or missing. Your bank knows your name. A message that starts with Dear Customer or has your name misspelled did not come from your bank.
• There is always a consequence if you don’t act immediately. Your account will be blocked in 24 hours. Your package will be returned. Legal action will be taken. This artificial urgency is the scammer’s most important weapon — it stops you thinking clearly.
• You are asked to click a link, scan a QR code, or call a number. Real banks and government offices send you to their official website. They don’t send shortlinks, QR codes, or private phone numbers.
• The language has small mistakes. Wrong capitalisation, odd phrasing, or unusual sentence structure. Scammers often use translation software.
• It asks for personal information you’ve already given. Your bank already has your account number and date of birth. They would never ask you to confirm these via email or text.

What to Do If You’ve Been Scammed in Germany

If you’ve already shared your banking details, act within the hour. Call the emergency card blocking number 116 116 — free, available 24/7 across Germany — to freeze your account and cards immediately.

Then report it:

• File a police report (Anzeige erstatten) at your local Polizei or via your state’s online portal (Online-Wache)
• Report phishing to Verbraucherzentrale at verbraucherzentrale.de — they maintain a live phishing radar updated daily
• Investment fraud: report to BaFin at bafin.de
• Suspicious calls and SMS: report to Bundesnetzagentur at bundesnetzagentur.de

Germany is not a high-crime country, but scammers are sophisticated, well-organised, and increasingly using AI. The good news is that the red flags are almost always there — once you know what to look for.