Latest Threat: Luxembourg Government "Digital Green Card" Phishing Scam
January 12, 2026
A new phishing campaign is targeting drivers in Luxembourg, impersonating the Luxembourgish Government (Myguichet.lu). The email claims that as of January 1, 2026, the automobile insurance certificate, commonly known as the "Green Card", has been dematerialised and is now only available in a digital format.
The scam tells recipients that this change was approved in a November 2025 government session and requires users to pay a small "administrative fee" of €4.99 to access their digital certificate. This is a fraudulent attempt to steal both personal information and credit card details.
How to spot this phishing attack:
1. Suspicious Sender Domain: The email address used is [email protected]. A legitimate communication from the Luxembourgish government would come from an official domain, not a Belgian internet service provider (Scarlet).
2. Deceptive Link: The "Accéder au service" button points to web.lu.elarius.be. This is a clear red flag; official government portals always use guichet.public.lu or myguichet.lu.
3. The "Administrative Fee" Hook: While digital transformations are real, the government does not charge small, random fees via unsolicited email links to provide digital versions of mandatory documents.
If you receive this email, do not click any links and do not pay the requested fee. Delete the email immediately. For official information regarding vehicle documents, always visit the official myguichet.lu portal directly.