Andorra Sees Decline in Bank Fraud but Christmas Phishing Surges

Police in Andorra have recorded 27 complaints of fraudulent bank card use and 458 cases of fraudulent use of banking data from the start of the year through early November. These figures mark a decline from 2024, when 57 card fraud reports and 643 data misuse complaints were logged over the full year. Most incidents originate outside the country, and recent cases have involved phishing scams where victims entered personal details into fake sites, enabling cybercriminals to exploit the information.

Authorities note that while totals could rise slightly before year-end, the drop reflects ongoing vigilance. In the past few days alone, additional phishing-related reports have surfaced, often triggered by deceptive emails or messages impersonating banks or delivery services.

As the Christmas season approaches, digital fraud risks are intensifying alongside heightened shopping activity. Andorra Telecom and the National Cybersecurity Agency (ANC-AD) warn of surging phishing and smishing attempts—fraudulent emails or texts mimicking couriers, banks, or e-commerce platforms. These lure users to click malicious links with claims of held packages, pending payments, or account blocks, aiming to harvest sensitive data.

Other rising threats include ghost shops: temporary websites or social media ads offering high-demand items like consoles, phones, or toys at steep discounts. Payments are taken, but goods never arrive. Gift card scams are also proliferating, with messages from supposed friends, family, or colleagues urging urgent purchases and code sharing under pretexts like surprises. No legitimate entity requests such actions.

To counter these, police advise keeping cards in sight during in-store use, handling them personally to prevent cloning, and using ATMs alone while shielding PINs. Shop staff should verify cardholder identity with ID. For online transactions, stick to trusted sites, enable bank alerts for payments, opt for virtual cards with limited funds, and avoid saving card details in browsers or accounts. Always verify suspicious requests through official channels before sharing data or paying.

Andorra Telecom echoes this, urging caution with unexpected communications, direct URL entry for sites, secure payment methods, two-factor authentication, regular bank statement checks, and device updates. Prevention remains the strongest defence, with direct contact to banks or police urged in cases of doubt.