ÖGK warns of phishing mail: Fraudsters promise a 450-euro refund. Many policyholders are unsettled—tips to protect against data theft on the website.
A “Heute” reader had recently submitted documents to the Austrian Health Insurance Fund (ÖGK). She was waiting to hear back and expected a refund. When an email arrived shortly afterwards with the subject “Refund: 450.40 euros,” everything seemed logical to her: logo, transaction number, official tone of voice, and a button for payment—everything looked genuine. But the message was fake. The fake email seemed particularly credible because she had submitted something and was waiting for money.
The scam only became apparent when the Viennese woman became suspicious. The supposed refund email was quite something: professionally designed, with deceptively genuine wording, but the button led to a fake website. If you click here, you send your bank details to criminals. The woman was shocked.
The health insurance company clarified that this email did not come from ÖGK. The official systems are secure. “There have been no security-related incidents at ÖGK,” the written statement reads.
According to the fund, the fraudulent emails are “mailshots” in the digital space – i.e., mass emails sent without a specific target. The fact that they reach people in contact with the ÖGK is a coincidence. Nevertheless, the timing seems extremely credible for many of those affected, as in the case of the Viennese woman.
Last year, several hundred policyholders contacted ÖGK to verify the authenticity of such emails. In 2025, the number of these queries fell sharply, but the health insurance fund continues to issue active warnings via its website, social media, and partner platforms such as Watchlist Internet. There is an urgent warning against clicking on links in suspicious emails.
Another problem: ÖGK cannot take any legal action as its systems are unaffected. The perpetrators usually operate from abroad, which makes investigations even more difficult. The e-mails are not aimed at health data, but at bank information.
The health insurance fund, therefore, refers to the law enforcement authorities and appeals to the media to help with the investigation. The professional structure of the emails means that many of those affected—like the Viennese woman—do not even recognize the fraud at first.
The ÖGK urgently appeals: “Please do not click on any links in suspicious emails and do not disclose any data.” Anyone unsure should contact the cash register directly or inform themselves via the official website.
Even if the email looks authentic at first glance, there is no promise of a refund, but a clever trap. The email is intended to create trust, and then exploit it coldly.
- source; heute.at/picture: pixabay.com
This post has already been read 47 times!