Delhaize & Cactus Scam: Beware Fake Prize Draws in Luxembourg
A tempting offer from a “friend” promising a share of a substantial cash prize, linked to popular retailers like Delhaize and Cactus? Be extremely cautious. A new wave of sophisticated scams is sweeping across Luxembourg, leveraging social engineering and exploiting trust to drain bank accounts. This isn’t just a local issue; it’s a rapidly evolving threat mirroring trends seen globally.
The “Green Card” Scam: The New Fraud That’s Spreading
Police reports confirm a surge in these fraudulent contest schemes. The core tactic? Gaining access to victims’ banking credentials under the guise of prize distribution. The sophistication lies in the initial contact and the speed with which the scam escalates.
It Starts with a Messenger Message from a “Friend”
The scam is meticulously crafted. “The fraud typically begins with a message sent via Facebook Messenger by a ‘friend’,” explains the Luxembourg police. “In reality, the fraudster is using a hacked profile of the friend in question. After obtaining the victim’s phone number, communication often shifts to another instant messaging service, such as WhatsApp.” This move to a different platform helps to obscure the trail and build a false sense of security.
An example of messages sent by the scammers. © PHOTO: Screenshot
provided by the police
“The victim is then invited, via a link, to participate in a contest with a significant cash prize to be shared equally,” the police add. “After completing the participation form and submitting their details, the participant is informed that a six-digit code will be sent shortly. This code will be used to verify a potential win and must be communicated to the contact.”
This is the critical point. Providing this code grants the scammer access to the victim’s phone and, crucially, their online banking. “Any doubts the victim may have are often allayed by fake gift checks or bank statements showing fictitious transfers from the alleged contest organizer. Throughout the process, the victim is often pressured to act quickly,” the police warn.
Recent cases have frequently involved fake contests purportedly offered by Cactus and Delhaize supermarkets.
If you believe you’ve been a victim, contact your local police station immediately.
How to Protect Yourself: Future Trends in Scam Prevention
These scams are evolving. Here’s what you need to know to stay protected:
-
Be wary of easy wins and offers that seem too good to be true. The rise of AI-generated deepfakes will make these offers even more convincing.
-
Always verify the identity of your contact. Reverse image search profile pictures to check for authenticity.
-
Confirm the existence of the company or organization mentioned and check for official announcements about the contest.
-
The absence of official rules, spelling errors, and translation mistakes are red flags.
-
Never share personal and sensitive data via email, SMS, or other messaging services.
-
Take your time. The more urgent the contact, the more suspicious you should be. Scammers rely on creating a sense of panic.
-
If you suspect a scam, cut off all contact immediately.
-
Educate elderly family members about these scams. They are often prime targets.
Did you know? According to the FBI’s Internet Crime Complaint Center (IC3), reported losses from online scams exceeded $10.3 billion in 2023, a significant increase from previous years.
Pro Tip: Enable two-factor authentication (2FA) on all your online accounts, especially banking and social media. This adds an extra layer of security, even if your password is compromised.
The future of these scams will likely involve more sophisticated AI-powered impersonation and increasingly personalized attacks. Staying informed and vigilant is your best defense.
What steps are you taking to protect yourself from online fraud? Share your thoughts and experiences in the comments below. Explore our other articles on cybersecurity and fraud prevention for more in-depth information. Subscribe to our newsletter for the latest updates and security alerts.