Banks never contact their customers via text message or email. If you’re unsure, don’t click on anything and report the attempt to your bank or the authorities. You should also contact your bank via its secure app. (Photo: Shutterstock)

Banks never contact their customers via text message or email. If you’re unsure, don’t click on anything and report the attempt to your bank or the authorities. You should also contact your bank via its secure app. (Photo: Shutterstock)

The number of phishing cases is rising rapidly in Luxembourg, with complaints having tripled in two years. Faced with increasingly sophisticated attacks, the authorities are stepping up their efforts, whilst the financial loss has already exceeded €10m.

Cybercrime continues to rise in Luxembourg, driven in particular by the rise of phishing, which has become one of the main forms of digital fraud. According to a joint parliamentary response from ministers and , the number of complaints lodged with the Grand Ducal Police rose sharply between 2023 and 2025.

Over the period, despite the authorities’ all-out efforts, such as , reports rose from 114 cases between August and December 2023 to 247 in 2024, and then to 367 in 2025. This increase reflects a rapid rise in the scale of the phenomenon, against a backdrop where cyberattacks are growing in both volume and sophistication, both in Luxembourg and across the rest of Europe.

Phishing typically involves deceiving victims via fraudulent emails, text messages or phone calls in order to obtain sensitive data, particularly banking details. The techniques used are constantly evolving, making detection more difficult for both individuals and businesses.

88 ongoing investigations

Whilst certain forms of telephone fraud, such as number spoofing, declined in 2025 thanks to technical measures put in place by operators, phishing remains the predominant method. The authorities also point out that the overall upward trend is expected to continue in the coming years.

From a legal perspective, investigations are progressing, but they highlight the complexity of these cases. Currently, 88 investigations are underway, 117 suspected perpetrators have been identified and 45 people have been arrested. Several cases have already resulted in convictions, with prison sentences, fines and compensation for the victims.

The financial cost is already significant. Since August 2023, the financial loss attributable to phishing has been estimated at around €10m, a figure that the authorities believe is likely to be an underestimate due to the number of unreported cases.

90 investigators and a dedicated task force

In response to this growing pressure, resources are gradually being stepped up. The Grand Ducal Police has deployed around 90 investigators and analysts to tackle general crime, money laundering and cybercrime. A dedicated task force comprising some fifteen experts was also set up in 2025 to specifically target phishing.

In the justice sector, nearly 40% of the staff at the Luxembourg Public Prosecutor’s Office are now assigned to economic and financial cases, which include these offences. A recruitment plan also provides for the creation of 94 additional magistrate posts by 2027, in order to cope with the increased workload.

Beyond enforcement, the authorities are focusing on prevention. Awareness campaigns, cooperation with banks and service providers, and educational initiatives in secondary schools: the aim is to reduce the public’s exposure to these digital scams, the scale of which continues to grow.

Related articles