ECB fraud: how to spot scams and what to do

ECB name/logo misuse — Practical summary

At a glance Criminals impersonate the ECB (name, logo, numbers like +49 69 1344 XXXX, look-alike domains) and even staff via emails, websites, phone calls and AI content. The ECB does not hold accounts for the public, does not ask for payments or personal data, and does not promote investments.

Key points

Multi-channel impersonation: email, websites, social media, phone (caller-ID spoofing), AI deepfake video/audio.

Not a retail bank: no “refund assistance” and no “blocked transfers” to be unlocked by paying a fee.

Official domains only: emails from @ecb.europa.eu or @ecb.int; legitimate links contain ecb.europa.eu.

Common scams: fake social profiles, “cross-border fees”, fake ECB online banking, bitcoin/crypto requests, “fund recovery” offers.

30-second checklist — Purpose: decide instantly whether to stop and report

Sender does not end with @ecb.europa.eu or @ecb.int → stop.

Link does not contain ecb.europa.eu (hover to preview) → stop.

Any request for money/data or urgent pressure (“now”, “today”) → stop.

Unexpected call showing +49 69 1344 XXXX → possible caller-ID spoofing → stop.

“Too good to be true” videos/messages; voice/lips out of sync → likely deepfake → stop.

What to do now

Do not interact (no clicks, no attachments, no replies).

Keep evidence: full screenshots, visible URLs, email/phone number, any IBAN.

Report: your police/national authority. If it’s a fake ECB website, inform the ECB via the Information Request Form.

If you paid/shared data: contact your bank (attempt a recall) and file a report; for crypto, notify your exchange immediately.

Quick reporting template

Subject: Possible fraud impersonating the ECB

Details: date/time; channel (email/phone/website/social); sender/number/URL; what was requested; amount/data requested

Attachments: screenshots; full email headers; complete URLs; any IBAN/transaction hash Official ECB page:https://www.ecb.europa.eu/services/using-our-site/disclaimer/html/misuse.en.html