Week 7: Scammers at your door

17.02.2026 - For months, calls claiming to be from public authorities have been among the most frequently reported cases to the NCSC. In most cases, the scammers pose as police officers. More recently, scammers have taken this a step further and are now also posing as employees of the NCSC itself. While earlier scams typically focused on obtaining access credentials or financial information directly, current cases combine psychological pressure with technical measures. They may involve remote access to a computer or smartphone, and can even culminate in the scammers appearing in person at the victim’s home.

A call with consequences

Last week, the NCSC was notified of a case that clearly illustrates how structured and complex these scams have become. The scammers contacted the victim by phone, posing as NCSC employees. Using manipulative conversation techniques, they built trust under the pretext of an urgent security issue. During the call, the scammers persuaded the victim to install remote-access software on their phone. Once they had established access, they first compromised the victim's bank account and carried out unauthorised transactions. They then claimed that the victim's credit cards had been blocked, creating further uncertainty. The scammers also tried to stop the victim from getting help from anyone else or checking the information they were given. Throughout the incident, the victim was in constant contact with the scammers via their phone.

In a next step, the scammers claimed that assets needed to be physically "secured" due to the alleged threat. They subsequently appeared in person or sent accomplices to the victim’s home, where they collected jewellery and cash.

Typical warning signs

Scammers are becoming increasingly professional, employing sophisticated psychological tactics and modern technology. As a result, even well-established preventive measures are often no longer enough. The rapid development of AI systems, particularly large language models, means that these scams are becoming more credible and more convincing overall. This makes it increasingly difficult to tell whether a contact from a public authority is genuine or fraudulent.

It is all the more important, therefore, to be aware of recurring patterns. Regardless of the story being told or the alleged threat, scam calls that claim to come from public authorities typically show similar warning signs:

An unexpected call referring to an alleged immediate threat or ongoing police investigations;
A request to keep the matter confidential, including from relatives and bank staff;
The installation or use of remote access software;
Requests for login details, one-time codes or TANs (transaction authentication numbers);
Pressure or threats to take immediate financial action;
An announcement that someone will come to collect cash or valuables.

This is not how public authorities operate. They do not ask people to install software over the phone, demand cash withdrawals or the handover of valuables, or insist on absolute secrecy. If several of these warning signs appear together, you should assume you are dealing with a scam.

It is not impolite to be sceptical of unexpected calls that create a sense of urgency; it is an important means of self-protection.

Recommendations

Be sceptical of phone calls that threaten you with consequences (e.g. loss of money, criminal charges, account/card blocking).
If you are unsure whether the call is really coming from the police, contact your nearest police station.
If you receive such a call, hang up straight away.
If you provided credit card details, contact your credit card company immediately to have the card blocked.
If you have suffered a financial loss, we recommend that you report it to the police. You can find your nearest police station on the Suisse ePolice website (available in German, French and Italian).
If you made a payment, immediately contact the bank through which you made it. They may be able to stop the payment.
If you have been tricked into installing remote access software, uninstall it immediately and change all passwords that you use on the device affected.

Current statistics

Last week's reports by category:

Current figures