Since late 2022, emails have been circulating that claim to originate from DIHK or IHK but have fraudulent intent. These messages always request updates to corporate data; however, no links should be clicked nor data shared as these are scams.

DIHK quickly blocks relevant email addresses and domains upon discovering new scams, though this provides only short-term relief. Always remain vigilant! Scammers use increasingly sophisticated methods to extract data from companies:

9 November 2026

'DA-2026-XXXX – Verification of Company Data by 11/20/26'

Currently, an email with the subject line 'Verification of the Data of Your Company Stored in the Register' and a reference number in the format DA-2026-XXXX is prompting recipients to check their own data via a dubious 'IHK Data Portal.' A supposed 'Data Maintenance Consultant' from a 'Service Center for Company Data' asks recipients to verify various details, including the IBAN and account holder’s name, after clicking on a designated button. The deadline given is November 20, 2026. The fraudsters add that if no response is provided by then, decisions and correspondence will be sent to the last known address. They list the central phone number of the DIHK for inquiries, but the footer references the 'Deutscher Industrie- und Handelskammertag' (German Association of Chambers of Commerce and Industry), which is the name under which the DIHK operated until 2023. This is just one clue that this email is another attempt to fraudulently obtain sensitive data under the guise of the IHK organization. Therefore, do not click anything, do not enter any information, and delete this message immediately!

6 November 2026

Letter 'Update Your Company Data – Important Deadline': Second Wave

The phishing method first seen at the end of September, involving postal letters with QR codes, is currently making the rounds again. As a reminder: A letter with the subject 'Update Your Company Data – Important Deadline' and signed by a supposed IHK director of the company register urges recipients to update their 'company data filed in the commercial register.' The senders threaten recipients with fines of up to €50,000 and the deletion of their commercial register entry. They then describe the familiar 'verification process': The potential victim is asked to scan the QR code printed at the bottom right of the letter and share information on 'IHK examination pages.' As always: Do not, under any circumstances, comply! Throw the letter away and protect your data!

23 October 2026

'DIHK Compliance Notice – Missing Documentation | Ref.: #IHKDE211026'

Even though it does not offer a direct link for data entry, a currently circulating email with the subject 'DIHK Compliance Notice – Missing Documentation | Ref.: #IHKDE211026' is not without risk. In the name of an actual DIHK employee – suspicious only in that it is signed as 'Compliance Officer (IHK)' – recipients are asked to confirm receipt of an email 'with documents for signature' allegedly sent the previous day. The various sender addresses belong to the domain ihk-dihk.de, which we have had taken offline immediately. Nevertheless, if you have already responded to the email, keep a very close watch for any further activities that may relate to this incident! Even better, of course: Delete the email without replying! It is not from the DIHK.

20 October 2026

Complaint Procedure – Reference Number: 89661

The most recent phishing attempt with a potential Chamber of Commerce reference refers to an alleged complaint procedure. In this case, a supposed Chamber of Commerce director, 'based on a received response,' is calling on recipients to review an 'attached document' and confirm it within 48 hours. Otherwise, the business licence under Section 34c would expire. The suspicious document is said to be contained in a 'secure VHDX container,' which – as you may have guessed – can supposedly be opened via a link on your computer. As always, you should absolutely not do this. This email, too, should go directly into your trash folder without any further action on your part.

5 October 2026

'Corporate Tax Documents'

A phishing email with the sender 'Mein IHK' and a similarly suspicious email address is appearing in a rather classic fashion. Under the subject line 'Corporate Tax Audit,' recipients are alerted to the alleged due date of a quarterly VAT advance declaration. The senders threaten that a 'failure to submit within 72 hours' may result in a 'restriction of your business registration.' To complete the process, the recipient is urged to provide their details on a linked page, according to the writer from the 'Department of Tax Affairs.' This email is, of course, not originated from the IHK organisation! Please do not click on anything, do not provide any information, and delete this crude phishing attempt.

30 September

Letter with QR code and subsequent phishing call: 'Update your company data – Important deadline'

A particularly devious new scam is targeting data for misuse under the guise of the IHK organisation: victims receive a letter in the post allegedly from an 'IHK Service Centre,' signed by a supposed 'Director of the Company Register' and with DIHK contact details in the footer. The letter demands the recipients to update their 'company data held in the commercial register.' Otherwise, it threatens fines and deletion from the commercial register. To input the requested data, the letter instructs scanning a QR code featuring an IHK logo at the centre. The form that then opens identifies the local IHK based on the provided location. It requests standard details, including bank account information. Subsequently, the victim receives a call from someone supposedly representing their bank (the caller ID displays the IHK number), insisting on carrying out changes together on their online banking setup. Under no circumstances should you comply, no matter how persistent the caller may be! Better yet: do not scan the QR code or fill out such forms in the first place! Simply throw the letter away and remain vigilant.

27 September 2026

"Update of Your Corporate Data 2026"

The latest version of phishing emails related to the IHK organization purports to come directly from the DIHK. This impression is reinforced by a DIHK logo and an authentic-looking employee photo. Under the subject "Update of Your Corporate Data 2026," recipients are addressed as "Dear Entrepreneur" and requested to submit corporate data by October 1 through a supposed DIHK.de link. The senders claim that the request was announced by mail earlier this year and threaten consequences such as "delays" or "temporary suspension of administrative processing." Notably, umlauts are fully spelled out; additionally, the logo is cropped, and the signature is misaligned. As always: Do not click anything or fill out any information—it is a scam!

17 September 2026

"Important Notification Regarding Your IHK User Account"

Referring to alleged "current EU regulations," fraudsters attempt to elicit data disclosure from companies in a new phishing email. Under the subject or headline "Important Notification Regarding Your IHK User Account," recipients are encouraged to "review stored corporate data" and supposedly re-enter outdated or empty fields. This is followed by a button labeled "To the Online Portal." The email tries to appear legitimate by including a proper-looking imprint: it lists the real address of the DIHK at the Haus der Deutschen Wirtschaft and names President Peter Adrian as well as the former Chief Executive Officer Dr. Martin Wansleben as authorized representatives. However, this does not negate the fraudulent nature of the email: the reference to "EU regulations" is fabricated, as is the alleged obligation for "data updates." Do not click on the linked button or provide your data—delete the email immediately! Neither DIHK nor the IHKs will ask you to verify or update data via email.

10 September 2026

"Your letter came back undeliverable"

Scammers threaten deletion of corporate data from the commercial register in emails titled "Your letter came back undeliverable." The message falsely claims to provide details about registry updates that have been returned undelivered, urging recipients to update their information promptly to avoid "administrative irregularities with legal consequences." Delete this email as it is not legitimate.

25 August 2026

#Notification: Update on Contact Options

Recipients of phishing emails titled "#Notification: Update on Contact Options" should be suspicious due to several discrepancies. Scammers disguise their Hungarian email address as "#IHK:customer service assistance" and refer to outdated information linked to DIHK CEO Dr. Martin Wansleben. Any request for "database reconciliation with member data" is fraudulent; delete the email immediately!

11 August 2026

Phone call followed by an email "Legitimation"

A new scam combines a phone call with an email titled "Legitimation." Scammers claim personal data is needed for regulatory permits, followed by an email requesting ID documentation sent to the address legitimation@XXX-ihk.info. Do not comply; validate authenticity directly with IHK or regulatory agencies.

11 June 2026

Deadline until 15 June: Update your company details in the IHK company register

Scammers threaten fines in emails titled "Deadline until 15 June" that demand data updates via links. These messages come from Dutch domains ending in ".nl." Always delete such emails without clicking any links.

11 May 2026

Final notice to update your company data

In May, phishing emails masqueraded as IHK correspondence under the subject "Final notice to update your company data." Allegedly for regulatory compliance, these messages demand data submission through fraudulent portal links. Delete them immediately!

14 April 2026

FINAL WARNING: Breach of statutory obligations – 24 hours deadline

Emails in April threaten administrative fines and promote links disguised to steal sensitive data. Messages are signed by fictitious department heads. Avoid interaction and delete them promptly.

17 March 2026

Important inquiry: Delivery method for annual financial statements

Phishing attempts in March requested "urgent replies" while threatening account suspensions for non-response. Avoid engaging with these emails, as scammers aim to collect sensitive corporate information.

11 February 2026

Official notice regarding stored company information

February emails accuse recipients of neglecting "required updates," urging them to visit fraudulent online portals. Delete these emails without clicking any links.

29 January 2026

Request to update your data

An email falsely claiming to originate from Deutsche Industrie- und Handelskammer urged corporate data updates using fabricated reference numbers. These scams should be deleted immediately.

26 January 2026

Status update on company data

January emails falsely reported unfinished data updates at DIHK, providing links to phishing sites aimed at stealing corporate information. Delete these messages.