Administration fraudGuichet.lu fraud
Guichet.lu fraud occurs when criminals impersonate Luxembourg’s official public administration portal, typically through phishing emails or SMS, to trick victims into visiting a fake Guichet.lu/MyGuichet.lu website and providing personal, banking, or LuxTrust credentials.
Concrete example
The victim receives a fraudulent SMS or email impersonating the Police and Guichet.lu, claiming that a traffic fine is due and directing the victim to a fake website to make the payment or provide information.
Red flags,
stop if
- An unexpected SMS claiming that the victim is entitled to a reimbursement.
- A message containing a link supposedly leading to Guichet.lu or MyGuichet.lu.
- A request to select the victim's bank and enter banking or LuxTrust credentials.
- A request to make a payment to receive a government reimbursement.
- A website that looks like Guichet.lu but uses a different URL.
- Urgent language, such as a reimbursement expiring or an account needing immediate verification.
- A request for passwords, OTPs, card details or other confidential information.
- A particularly strong Luxembourg-specific red flag is that Guichet.lu and MyGuichet.lu do not contact users by SMS; the Luxembourg Police advises checking the URL and not clicking links in such messages.