iDeal, the main online payment method used across the Netherlands, is being rebranded as Wero. Over the next months you may see iDeal and Wero logos together at checkout. The companies involved expect the change to complete by 2027 and say customers do not need to take action for the transition.
Criminals are exploiting the transition by sending fake emails to iDeal users. These emails claim the payment system is switching to Wero and that you are due a refund. The message includes a link and asks you to enter personal or payment information to receive the refund. There is no real refund in these messages. The goal is to steal data or money.
Currence, the company that manages iDeal and Wero, confirmed this is happening and told NOS that phishing attempts started after the rebranding announcement. The Fraud Help Desk received roughly 100 reports of these fraudulent emails per day during July. Currence's director, Daniël van Delft, advised people not to click links in these kinds of emails and to check with their bank about any suspicious messages.
Practical steps to protect yourself
- Do not click links in unexpected emails that claim you are owed a refund. Links can lead to phishing sites that steal login credentials or payment details.
- Verify with your bank or the official payment provider. Use telephone numbers or websites you already have, not contact details in the suspicious email.
- Treat urgent language and requests for personal or payment information as red flags. Legitimate organisations typically do not request sensitive data via email links.
If you clicked a link or entered details
- Contact your bank immediately and report the incident so they can monitor or block transactions.
- Change passwords for accounts that may be affected and enable any available two-factor authentication.
- Report the phishing email to your bank, to the Fraud Help Desk, and to the platform that hosted the message if applicable.
The iDeal-to-Wero transition itself is legitimate and scheduled to finish by 2027, but criminal scams are leveraging the news to trick people into handing over information. Treat refund emails that ask you to click a link with suspicion. When in doubt, contact your bank directly through known channels.