Week 46: How scammers exploit the "Swissness factor"

18.11.2025 - There have been an increasing number of reports in recent weeks of scam websites claiming to belong to real Swiss companies. The affected companies often do not have their own website but are listed in the ZEFIX commercial register. Companies with a web presence can also be targeted. Scammers deliberately exploit the "Swissness factor" to create a sense of trust, as Swiss companies are generally considered reliable and trustworthy. Scammers exploit this perception to manipulate their victims.

In recent weeks, we have received several reports about scam websites claiming to represent Swiss companies. In every case, the site's company information section included either the real company name or a valid entry from the commercial register. For example, one scam website for a consultancy matched the details of a real company in the commercial register.

Our review confirmed that the company in question is real and that its commercial register entry is correct. As the company has no website of its own, scammers use the publicly available register information to build a fake site that looks like the real thing. We suspect that the perpetrators actively search the commercial register for companies without a web presence and create scam sites in their name.

Scam website with correct commercial register information
Scam website with correct commercial register information

Fake law firms and copyright traps

This tactic is especially sneaky in connection with copyright claims. Scammers may send you an email accusing you of copyright infringement. To make the message appear legitimate, they use the names of real law firms and their employees. Many people respond to such emails by looking up the mentioned law firm to check whether it actually exists. If you do this and come across a convincing website with correct information about a Swiss company, your initial scepticism can quickly fade. It seems as though you are dealing with a legitimate legal office. As a result, you may end up paying money or handing over personal data, even though no copyright violation has occurred.

Identity theft through scam webshops

In another case, scammers used the name of a real person who has a website but does not run a webshop. They created a fake shop with a similar domain name and copied information from the original site to make it appear genuine. They also included the correct commercial register number. As the fake shop offered cameras and related gear, and the supposed owner is listed as a photographer in the commercial register, the whole setup appeared plausible. However, orders placed and paid for through this shop were never delivered. Complaints from victims were then directed to the real website owner.

Scam webshop with a real photographer's initials and address
Scam webshop with a real photographer's initials and address

Lookalike domains for banks

Banks are also frequent targets of lookalike domains. Scammers create a website that is almost identical to the real bank's site. The domain name differs only slightly from the original, and the perpetrators rely on victims not noticing this subtle difference. In one case, the scammers posed as bank employees and used the lookalike domain exclusively for email communication. They also set up a redirect on this domain that pointed to the genuine bank website. If you become suspicious and type the domain into your browser to check it, you are automatically taken to the genuine site. This creates the impression that everything is in order and that the fake domain also belongs to the bank. However, in reality, email communication takes place via the fake domain, meaning sensitive data could end up in the hands of the scammers.

Fake firewood shops during the winter season

The colder months bring higher demand for firewood – something scammers are quick to exploit. Fake online shops offering firewood at unbeatable prices keep cropping up. In a recent case, the domain of a real company was copied and altered by adding a hyphen. For most people, this small change is hard to spot. At first glance, the website looks legitimate, featuring images, good deals, and the company's contact details – but behind this façade lies a scam. Anyone who places and pays for an order receives no goods and has to bear the loss. As with previous cases, complaints from victims were directed to the real business owner.

Recommendations

For individuals:

  • Use your common sense
    Be cautious when dealing with unfamiliar websites or offers that seem too good to be true, even if the site appears to have a Swiss connection. If a deal seems too good to be true, it probably is.
  • Do your research
    Do your research: Look for external references, reviews or any visible online history of the company. In Weekly Review 28/2025, we explained how to spot scam websites – you may find this guide helpful.
  • Avoid advance payments
    With unfamiliar shops, choose payment on invoice or use a payment service that offers buyer protection.

For business owners:

  • Register your own domain
    Secure the domain that matches your commercial register entry (e.g. .ch), even if you do not yet plan to launch a website. This prevents scammers from claiming it.
  • Add a warning
    If you become aware that your company name is being used for scams, you can publish a clear warning on your site. This helps inform anyone who looks up your business.
  • Report the scam (takedown)
    If you find a scam website using your name, contact the website's hosting provider or domain registrar. They all have a dedicated 'abuse' email address to which you can report the issue and request that the site be taken down.

Last modification 17.11.2025

Top of page

https://www.ncsc.admin.ch/content/ncsc/en/home/aktuell/im-fokus/2025/wochenrueckblick_46.html