Scams
Kleinanzeigen Phishing Campaign Spoofs PayPal and DHL Checkout Pages
German buyers and sellers report fake Kleinanzeigen payment links that harvest credentials and card numbers.
CyberBlackmail Intel··5 min read
Security researchers identified a Kleinanzeigen-focused phishing campaign distributing links that mimic PayPal invoice pages and DHL parcel fee portals. Victims—often car and electronics sellers—receive messages claiming a buyer has paid but additional shipping insurance is required. The phishing kit rotates domains weekly to evade blocklists. BSI recommends verifying payments only inside Kleinanzeigen and never following links sent via external chat apps.