Attention, Galaxy users! Scammers impersonate Samsung

Samsung Galaxy smartphone users should exercise extreme caution. A new phishing campaign has started circulating in the Samsung Members app, which has already affected people using the devices in Europe and the US. The mechanism is simple: fake messages pretending to be official Samsung notifications try to phish for data under the pretext of urgent account verification.

Dangerous phishing is circulating in Samsung Members

According to reports appearing on foreign forums, victims are receiving messages with a threatening-sounding message stating that – if they do not immediately verify their accounts – they will be charged a $500 fine. The message leads to an external link where personal information allegedly must be provided to avoid the “fee.”

At first glance, the announcement looks official, but alarming details reveal it to be a hoax. There is a typo in the title – “Samsug” instead of “Samsung.” The content also refers to a non-existent law: “International Act No. S67 EU-DIG-ID-2025.” This type of treatment is supposed to create the appearance of seriousness, but is only an element of manipulation.

What is phishing and why is it dangerous?

Phishing is one of the most common forms of cyber fraud involving the impersonation of a trusted institution – a bank, a store, a phone carrier, or in this case Samsung. The goal is to put pressure and fear on the recipient to act quickly and without thinking: click a link, provide login credentials, card number, PESEL or other sensitive information.

The characteristics of phishing are:

• fake links leading to sites confusingly similar to the original ones,
• Typos and language errors,
• Threats and messages that work “in time.”
• mentions of alleged penalties, blockades or immediate consequences,
• Using logos and styling of real companies.

Exactly these items have now appeared in fake messages sent out by Samsung Members.

Samsung responds: it’s not coming from us

Samsung has confirmed that the messages circulating have nothing to do with the company. The official messages do not contain financial threats or demands for immediate data.

Users who encounter a suspicious notification should:

• don’t click links,
• do not provide any data,
• report the incident through official channels or in Samsung Members, but necessarily without going into a suspicious message.

Why is the matter serious?

The attack takes advantage of the fact that Samsung Members is the manufacturer’s official app – so the user naturally trusts it. In practice, this means that scammers are taking phishing to a new level by pretending to communicate within the Samsung ecosystem.

If the campaign spreads, it could pose a real threat to login credentials, access to the Samsung Cloud or even activation of Samsung Pay-related services.

How do you protect yourself? Basic rules

• Any message with errors, typos or time pressure should arouse vigilance.
• Samsung never threatens financial penalties for not responding quickly.
• Before clicking on a link, it’s a good idea to check that the URL is correct.
• The safest way is to open the Samsung account panel manually – by going into the phone’s settings, not through links.