Dutchreview iconDutchreviewAug 26, 2026 ~5 min source read

iDeal is becoming Wero — scammers are using that change to send fake refund emails

Criminals are sending phishing emails that claim iDeal/Wero refunds require you to click a link. The switch to Wero should happen automatically, so treat any refund request with skepticism and check directly with your bank.

Use iDeal and Wero? Watch out for these fake emails

Share this story

Send the public story page.

Useful takeaways from this story.

If you get an email asking you to click a link for a refund, do not click it. Contact your bank or payment provider directly to verify.

Watch sender addresses, unexpected refund claims, and urgent language in messages — these are common phishing signals.

iDeal, the main online payment method used across the Netherlands, is being rebranded as Wero. Over the next months you may see iDeal and Wero logos together at checkout. The companies involved expect the change to complete by 2027 and say customers do not need to take action for the transition.

Criminals are exploiting the transition by sending fake emails to iDeal users. These emails claim the payment system is switching to Wero and that you are due a refund. The message includes a link and asks you to enter personal or payment information to receive the refund. There is no real refund in these messages. The goal is to steal data or money.

Currence, the company that manages iDeal and Wero, confirmed this is happening and told NOS that phishing attempts started after the rebranding announcement. The Fraud Help Desk received roughly 100 reports of these fraudulent emails per day during July. Currence's director, Daniël van Delft, advised people not to click links in these kinds of emails and to check with their bank about any suspicious messages.

Practical steps to protect yourself

  • Do not click links in unexpected emails that claim you are owed a refund. Links can lead to phishing sites that steal login credentials or payment details.
  • Verify with your bank or the official payment provider. Use telephone numbers or websites you already have, not contact details in the suspicious email.
  • Treat urgent language and requests for personal or payment information as red flags. Legitimate organisations typically do not request sensitive data via email links.

If you clicked a link or entered details

  • Contact your bank immediately and report the incident so they can monitor or block transactions.
  • Change passwords for accounts that may be affected and enable any available two-factor authentication.
  • Report the phishing email to your bank, to the Fraud Help Desk, and to the platform that hosted the message if applicable.

The iDeal-to-Wero transition itself is legitimate and scheduled to finish by 2027, but criminal scams are leveraging the news to trick people into handing over information. Treat refund emails that ask you to click a link with suspicion. When in doubt, contact your bank directly through known channels.

More context around this story.

Watch out for this fake Face ID Apple Pay pop-up scam
Macworld iconMacworldAug 28, 2026

Watch out for this fake Face ID Apple Pay pop-up scam

Macworld The security, antivirus, and VPN company Malwarebytes has an interesting post on its Malwarebytes Labs blog detailing a new and sophisticated scam. The web-based trick is meant to make users think that they just made a big payment with Apple Pay, with the goal being to trick them into calling a fake “Apple Sup

Loading more related stories...

Keep reading in the app

Open the app view to save this story, compare related coverage, and continue from the same source.

Open in app