Fraudulent DigiD letters with QR codes: what Ukrainians in the Netherlands need to know.

The Radar Service received reports about suspicious letters from DigiD. They require scanning a QR code for reactivating the account. The event confirmed suspicions, as the official DigiD service warned about fake messages.

Fake Activation

One reader sent a photo and screenshot of a suspicious letter, in which they are asked to reactivate DigiD to protect their data. It is worth remembering that the real DigiD service never sends links or QR codes.

Phishing spreads quickly, and fraudsters are becoming more sophisticated. They are trying to gain access to DigiD data or bank details using fake letters, SMS, or mail with counterfeit links.

What to do if you have already entered your data?

If you scanned the QR code and entered your data or clicked on the link, DigiD has placed steps to follow in such a situation.

If you suspect that someone has changed your DigiD account without your permission, immediately contact support.

How to recognize a fake message

To identify fake letters or messages, pay attention to the following signs:

• The message causes alarm (for example, a message about the insecurity of your DigiD data)
• The message contains a link or QR code
• The letter looks unusual
• The message goes to spam
• The text contains mistakes or is poorly written

Actions upon receiving a fake message

If you suspect that you have received a fake letter, SMS, or message, report it to DigiD. Also, delete it from your mailbox and trash. If in doubt, you can always call the DigiD support service.

For more information about fake letters and messages, visit FraudeHelpdesk. There you can find current examples of fraudulent messages.