How did the fraud occur?

An unknown person sent the victim an SMS with a link to a fake classified ads page, where he entered his banking details.

How much money was stolen?

More than 3,800 euros were unauthorizedly withdrawn from the 49-year-old's account.

What does the police advise?

The police warn that banking details should not be entered on suspicious websites and that the CVV/CVC card code is not needed to receive a payment.

Where can one check if a website is fake?

CARNET's National CERT offers the CERT iffy service at iffy.cert.hr, where the authenticity of an online store can be verified.

Croatia

Man loses over 3,800 euros selling a men's bag

B.G. · Prije 3h | 2 min

Osijek-Baranja Police Department warns citizens about the dangers of sharing banking details on suspicious websites.

Summary

A man from Osijek-Baranja County was defrauded of more than 3,800 euros while selling a bag through a classified ads platform.
The scammer sent him a fake link via SMS, which led to the theft of his banking details.
Police warn citizens not to share sensitive banking information on suspicious websites.
The CERT iffy service is available for checking suspicious online stores.

A 49-year-old man from the Osijek-Baranja County fell victim to a cyber scam, losing more than 3,800 euros, the Osijek-Baranja Police Department reported on Tuesday, August 4, 2026. The fraud occurred during the online sale of a men's bag through a classified ads platform.

According to the police report, the victim posted an ad for the bag on August 1, 2026. The very next day, August 2, he received an SMS from an unknown person. The message contained a link that appeared to be the legitimate page of the classified ads app where the ad was posted.

Entered banking details on a fake website

Believing he was communicating with a potential buyer, the 49-year-old opened the link and entered his banking details to receive payment for the sold item. However, it turned out to be a counterfeit website. Subsequently, the unknown individual used his information to unauthorizedly withdraw over 3,800 euros from his account.

The police are searching for the unknown perpetrator and have once again issued a warning to citizens. They emphasize that bank card details should not be entered on suspicious websites or in unknown applications. To receive a payment, it is not necessary to enter the card number, its expiration date, or the CVV/CVC security code.

Available tools for verification

Citizens can find more information about cyber fraud and ways to protect themselves on the website webheroj.hr. Additionally, CARNET's National CERT has launched the CERT iffy service, which checks whether an online store shows signs of being a fake website. On the site iffy.cert.hr, users need to enter or paste the store's address and then run the check.