Andorra's FEDA Warns Customers of Phishing Emails Stealing Bank Data

FEDA, Andorra's public energy utility, has reiterated warnings to customers over a phishing campaign using fake emails that mimic the company to steal personal and banking details.

The fraudulent messages claim a bounced payment due to insufficient funds, complete with a fake invoice number, contract reference, and payment deadline. They include a "Pay the bill" button or link that directs users to bogus websites designed to harvest credentials and financial information, while threatening imminent power suspension to create urgency.

FEDA emphasizes it never requests banking details through links in unsolicited emails. Customers should always check the full sender address, verify that any links point to the official domain, and ignore messages stirring panic or cutoff threats. The company advises deleting suspicious emails without clicking links or buttons, avoiding submission of personal or banking data, refraining from replies, and contacting FEDA through official channels if in doubt.

Jordi Ubach, president of the Andorra Cybersecurity Agency, noted that such campaigns are automated and aim to lure as many clicks as possible.

The alert follows similar scams targeting other public entities, including CASS emails promising refunds that led to fake sites seeking credit card information, and spoofed messages impersonating Andorra Digital from external servers.

FEDA first posted the notice on social media on Monday, August 18, 2026, with coverage appearing the next day. The utility is monitoring the campaign, but no details have surfaced on its scale or verified victims.