Email from my energy supplier — phishing or real?
DIRECT ANSWER
Energy phishing peaks around annual-statement season and price crises. We give 7 red flags + what to do if you already clicked.
Reviewed by FFCheck-redactie · Last reviewed 2026-05-28
7 red flags of energy phishing:
- sender domain wrong ("vattenfall-betalingen.com" not "vattenfall.nl")
- urgent threat ("your connection will be cut off tomorrow")
- asks for login/password/IBAN via link
- unexpectedly high or low statement
- generic greeting ("Dear customer")
- link points to bit.ly or fake domain (hover first)
- demands payment via gift cards, crypto or foreign bank transfer. What to do: do NOT click. Log directly into the official portal/app — if the message is real it will be there. Report phishing to your supplier AND to fraudehelpdesk.nl. Already clicked or paid? Call your bank immediately, block your card, report to police.