A Facebook prize draw promise cost a Mainz resident more than 40,000 euros after scammers combined a fake win with remote desktop software to drain his online banking accounts, the Mainz police headquarters stated on Tuesday.
The fraud began with a social media advertisement promising monthly payouts between 30,000 and 50,000 euros. To claim the funds, the victim first transferred several thousand euros as an initial fee.
The perpetrators then contacted the man by telephone. They instructed him to unlock his online banking profile to receive the payout, according to police reports.
During the call, the victim permitted the supposed prize operator to access his computer remotely. He then entered his online banking credentials while the callers watched his screen.
Shortly after the remote session ended, approximately 21,000 euros vanished from the victim’s account. The following day, the caller returned with a larger claim.
The suspect told the man he had won more than 300,000 euros. To release this larger sum, he demanded an upfront tax payment of 78,000 euros.
The victim grew suspicious and attempted to withdraw from the process to recover his initial funds. Instead of receiving a refund, another 19,000 euros disappeared from his bank account.
The man then blocked his online banking access and filed a formal complaint. Police calculated the total financial damage at upwards of 40,000 euros.
The perpetrators used a calculated mix of hope and financial pressure. Victims who have already transferred funds often continue paying to avoid losing their initial investment.
Demanding taxes before releasing winnings is a classic secondary maneuver designed to extract maximum capital. Programs like AnyDesk or TeamViewer give external actors full visual control of a victim’s desktop, enabling them to execute unauthorized transfers directly.
Police said that this technical approach mirrors tactics used by callers posing as bank employees or police officers. Even well-informed decision-makers frequently fall victim to these internet traps.
Legitimate prize draws never demand money upfront for entry fees, notarization, or taxes. Private winnings in Germany are generally tax-free, making any demand for advance tax payment a clear warning sign.
Authorities advise users never to pay money to claim a prize. Anyone asked by an unknown caller to install remote maintenance software should disconnect immediately.
Bank credentials, PINs, and TAN codes must remain private. Financial institutions never request these details by telephone or email.
Users can mitigate risk by setting strict daily transfer limits, such as 2,000 euros, directly within their online banking settings. Anyone who has already exposed credentials or granted remote computer access must act swiftly.
Victims should contact the 116 116 blocking hotline or their bank immediately to freeze accounts. Police also advise disconnecting the compromised computer from the internet and filing a report.
