Email from my energy supplier — phishing or real?
Energy phishing peaks around annual-statement season and price crises. We give 7 red flags + what to do if you already clicked.
7 red flags of energy phishing: (1) sender domain wrong ("vattenfall-betalingen.com" not "vattenfall.nl"); (2) urgent threat ("your connection will be cut off tomorrow"); (3) asks for login/password/IBAN via link; (4) unexpectedly high or low statement; (5) generic greeting ("Dear customer"); (6) link points to bit.ly or fake domain (hover first); (7) demands payment via gift cards, crypto or foreign bank transfer. What to do: do NOT click. Log directly into the official portal/app — if the message is real it will be there. Report phishing to your supplier AND to fraudehelpdesk.nl. Already clicked or paid? Call your bank immediately, block your card, report to police.