How was the woman deceived?

After posting an ad for the sale of a device, an unknown person sent her a fake link where she entered her card number and CVC/CVV number, after which money was deducted from her account.

What details does a buyer actually need for payment?

For a transfer to a current account, the buyer only needs the IBAN. Card number, CVC/CVV number, or online banking details are never required.

What should I do if I suspect fraud?

Immediately contact your bank to try to prevent further transactions and report the incident to your nearest police station.

Where can I learn more about protecting myself from online fraud?

More information about types of cyber fraud and protection methods is available on the Web Hero website.

Croatia

Left Without Several Thousand Euros

A.H. · Prije 2h | 2 min

Police warn: Buyers only need an IBAN for payment, never share your CVC/CVV number or online banking details.

Summary

A 59-year-old woman from Krapina-Zagorje County was deceived during an online device sale and lost several thousand euros.
The scammer sent her a fake link where she entered her bank card details, including the CVC/CVV number.
Police emphasize that an IBAN is sufficient for payment and that card details should never be shared with unknown individuals.

The Krapina-Zagorje Police Department has reported a new case of online fraud in which a 59-year-old woman was left without several thousand euros. She was deceived while attempting to sell a device through an online classifieds site, after entering sensitive bank card details on a fake link.

How the Fraud Unfolded

According to the police statement, the woman reported the incident on Wednesday, August 6, 2026. She had previously posted an ad for the sale of a device on the classifieds site, and shortly thereafter, an unknown person contacted her via a digital content exchange app, with whom she agreed on the sale.

After reaching an agreement, the unknown person sent her a link. Upon opening it, the 59-year-old entered the requested bank card details, including the card number and the security CVC/CVV number. Shortly afterward, an amount of several thousand euros was withdrawn from her bank account.

Warning to Citizens: IBAN Is Sufficient

The police once again urge citizens to be extremely cautious when selling online. They emphasize that card details are never required for a transfer to the seller's current account, providing the IBAN is sufficient.

They particularly warn about common signs of fraud: sending links that supposedly lead to bank or delivery service websites, requesting personal data entry, fake websites with numerous spelling errors, and requests for debit or credit card details. They highlight as extremely dangerous the request for the three-digit CVC/CVV number from the back of the card, as well as online banking access details, such as token numbers or one-time passwords.

The police advise that card details should never be shared with unknown individuals. If fraud is suspected, citizens should immediately contact their bank and report the incident to the police. Additional information about cyber fraud and protection methods can be found on the Web Hero website.