Phishing emails sent in the name of the commercial register (FCRO)
The NCSC is currently receiving numerous reports regarding an allegedly necessary data update in the Commercial Register (FCRO). These are phishing messages. Do not respond to them; delete these messages.
Recommendations for companies
Businesses with little or no online presence should consider implementing the following security measures:
- Set up a basic official website that serves as your main source of information and point of contact. This will make it more difficult for scammers to hijack your company’s online identity.
- Regularly search for your company name online to help detect any misuse early.
- Make your staff aware of potential scams involving outsiders posing as partners or customers.
General recommendations
- Be cautious if you are contacted unexpectedly, even if the sender’s details (e.g. company name, address, registration number) appear legitimate at first glance.
- Verify the sender’s identity using an independent source, such as the company’s official website or by calling them on their official phone number, before responding to requests or sharing sensitive information.
- Watch out for small differences in email addresses (e.g. info@company-switzerland.com instead of info@company.ch), and be aware of unusual communication styles.
- Report any suspicious incidents to the NCSC, and contact the police if you have suffered financial loss.