Fraudsters posing as representatives of the Chamber of Commerce (KVK - Kamer van Koophandel) send massive phishing emails and SMS messages. Often they are talking about the need for re-identification, an outdated digital key, the threat of a fine, and so on. When clicking on a link in an email or SMS, you must enter personal information: the information obtained in this way is then used by fraudsters for the purpose of illegal financial gain.
Calculation of scammers
Like us wrote, residents of the Netherlands become victims of Internet scammers quite often: for example, in 2020, every sixth person was in this role. Often, scammers make contact under the guise of police, tax or customs officers. Their calculation is fast reaction user to a message with such a "magic" word, such as, for example, Belastingdienst (tax). When you see it, you no longer delve into the details, but simply follow the instructions for transferring certain personal data.
And we will focus on a new round of Internet fraud - fake emails and SMS messages purporting to be from KVK. How to deal with it?
What is phishing?
Phishing is a form of digital fraud, in which attackers try to steal login information, credit card information, PIN codes, or other personal information. Data is received through e-mail, but sometimes by phone, through ordinary paper letters, through instant messengers.
In emails purporting to come from the Chamber of Commerce, the sender, for example, asks you to request a digital key from the Chamber of Commerce by clicking on a link. Don't click on this link! Forward the letter to phishingmessage@kvk.nl. KVK receives a large number of fake e-mails to this address on a daily basis, reports are compiled based on their analysis, and, if necessary, fake sites to which e-mails are sent are deleted.
How to recognize a fake message?
First, let's figure out what KVK never writes about in their messages.
KVK never via email or SMS:
- does not issue fines and does not threaten to do so;
- does not threaten to revoke your KVK number or stop your registration with the Commercial Register;
- does not ask you to check the data by clicking on the link;
- does not send messages with QR codes for data transfer;
- does not oblige you to request or update a digital key, access code or password.
You can:
- request an access code to the Chamber of Commerce account independently on the kvk.nl website, and not by e-mail or text message;
- order the services of the Chamber of Commerce, for example, obtaining a KVK statement.
Examples of phishing emails on behalf of KVK:
- Personal data is not provided completely,
- Confirm registration,
- KVK registration expires,
- Update your details,
- Check your details in the UBO registry,
- Check your details or risk a €4200 fine,
- Energy support available early 2023.
Email spoofing
Spoofing is a type of cybercrime, where the attacker impersonates a known contact or organization.
- @e.kvk.nl,
- @onderzoek.kvk.nl,
- @ondernemerspanel.kvk.nl.
If you receive an email that you do not trust, send this message to phishingmessage@kvk.nl or call 088 585 1585. You can also check the email yourself by analyzing the header based on the information we gave above.
Can I trust KVK invitations to participate in surveys?
KVK regularly examines the opinion of entrepreneurs on certain issues, how they use KVK services. To conduct surveys, KVK collaborates with independent research agencies Totta Research and DVJ Insights.
If you received a survey invitation and are not sure if it was from KVK, check if the invitation was sent from an email address ending in e.kvk.nl, kvk.nl, research.kvk.nl or enterprisespanel.kvk.nl . From address KVKonderzoek@dvjresearchgroup.com a quarterly study is carried out to find out the opinion of entrepreneurs about KVK. If you received an invitation to a survey on behalf of KVK from another domain, this is a red signal. However, the above email extensions can be spoofed.
Important! In surveys, KVK never asks for personal information such as bank details, login codes, etc.
What to do if you clicked on a link in a phishing email?
You may end up on a page where you need to enter data. This page looks like it belongs to KVK, with logo and corporate identity. Do not enter any personal information if you have the slightest doubt!
What to do if you entered personal data on a fake site?
Be alert to calls coming from, for example, your bank. Don't panic and don't transfer money. It is possible that the offender will say that he is calling on behalf of the bank. For example, a person says that money was mistakenly transferred from your account, and asks you to click on a link to “refund” the amount (get it back to the account). Don't click! Thus, you transfer money to the criminal. If you have done this, contact your bank immediately.
If you have entered your DigiD details, please change your DigiD password immediately and use two-factor authentication. Read more about DigD fraud and how to protect against it. here.
How not to fall into the clutches of scammers who act on behalf of KVK: tips
- Use a spam filter, such as one from your ISP, to protect your mailbox from phishing emails.
- Install antivirus software that will warn you if you want to follow an untrusted link. You can also check if a website is fraudulent, phishing, or untrustworthy with ScamCheck.
- Block email addresses from senders you don't trust.
- If you receive suspicious messages from a country you do not do business with, you can block messages from that country. These messages will not disappear immediately, but will fall into the spam filter. In this instructions You can read how to block emails from a specific country in Outlook.
- If you have received a letter from KVK that you have doubts about, send this message to phishingmessage@kvk.nl or call KVK on 088 585 15 85.
