Since late 2022, emails have been circulating that claim to originate from DIHK or IHK but have fraudulent intent. These messages always request updates to corporate data; however, no links should be clicked nor data shared as these are scams.

DIHK quickly blocks relevant email addresses and domains upon discovering new scams, though this provides only short-term relief. Always remain vigilant! Scammers use increasingly sophisticated methods to extract data from companies:

30 September

Letter with QR code and subsequent phishing call: 'Update your company data – Important deadline'

A particularly devious new scam is targeting data for misuse under the guise of the IHK organisation: victims receive a letter in the post allegedly from an 'IHK Service Centre,' signed by a supposed 'Director of the Company Register' and with DIHK contact details in the footer. The letter demands the recipients to update their 'company data held in the commercial register.' Otherwise, it threatens fines and deletion from the commercial register. To input the requested data, the letter instructs scanning a QR code featuring an IHK logo at the centre. The form that then opens identifies the local IHK based on the provided location. It requests standard details, including bank account information. Subsequently, the victim receives a call from someone supposedly representing their bank (the caller ID displays the IHK number), insisting on carrying out changes together on their online banking setup. Under no circumstances should you comply, no matter how persistent the caller may be! Better yet: do not scan the QR code or fill out such forms in the first place! Simply throw the letter away and remain vigilant.

27 September 2026

"Update of Your Corporate Data 2026"

The latest version of phishing emails related to the IHK organization purports to come directly from the DIHK. This impression is reinforced by a DIHK logo and an authentic-looking employee photo. Under the subject "Update of Your Corporate Data 2026," recipients are addressed as "Dear Entrepreneur" and requested to submit corporate data by October 1 through a supposed DIHK.de link. The senders claim that the request was announced by mail earlier this year and threaten consequences such as "delays" or "temporary suspension of administrative processing." Notably, umlauts are fully spelled out; additionally, the logo is cropped, and the signature is misaligned. As always: Do not click anything or fill out any information—it is a scam!

17 September 2026

"Important Notification Regarding Your IHK User Account"

Referring to alleged "current EU regulations," fraudsters attempt to elicit data disclosure from companies in a new phishing email. Under the subject or headline "Important Notification Regarding Your IHK User Account," recipients are encouraged to "review stored corporate data" and supposedly re-enter outdated or empty fields. This is followed by a button labeled "To the Online Portal." The email tries to appear legitimate by including a proper-looking imprint: it lists the real address of the DIHK at the Haus der Deutschen Wirtschaft and names President Peter Adrian as well as the former Chief Executive Officer Dr. Martin Wansleben as authorized representatives. However, this does not negate the fraudulent nature of the email: the reference to "EU regulations" is fabricated, as is the alleged obligation for "data updates." Do not click on the linked button or provide your data—delete the email immediately! Neither DIHK nor the IHKs will ask you to verify or update data via email.

10 September 2026

"Your letter came back undeliverable"

Scammers threaten deletion of corporate data from the commercial register in emails titled "Your letter came back undeliverable." The message falsely claims to provide details about registry updates that have been returned undelivered, urging recipients to update their information promptly to avoid "administrative irregularities with legal consequences." Delete this email as it is not legitimate.

25 August 2026

#Notification: Update on Contact Options

Recipients of phishing emails titled "#Notification: Update on Contact Options" should be suspicious due to several discrepancies. Scammers disguise their Hungarian email address as "#IHK:customer service assistance" and refer to outdated information linked to DIHK CEO Dr. Martin Wansleben. Any request for "database reconciliation with member data" is fraudulent; delete the email immediately!

11 August 2026

Phone call followed by an email "Legitimation"

A new scam combines a phone call with an email titled "Legitimation." Scammers claim personal data is needed for regulatory permits, followed by an email requesting ID documentation sent to the address legitimation@XXX-ihk.info. Do not comply; validate authenticity directly with IHK or regulatory agencies.

11 June 2026

Deadline until 15 June: Update your company details in the IHK company register

Scammers threaten fines in emails titled "Deadline until 15 June" that demand data updates via links. These messages come from Dutch domains ending in ".nl." Always delete such emails without clicking any links.

11 May 2026

Final notice to update your company data

In May, phishing emails masqueraded as IHK correspondence under the subject "Final notice to update your company data." Allegedly for regulatory compliance, these messages demand data submission through fraudulent portal links. Delete them immediately!

14 April 2026

FINAL WARNING: Breach of statutory obligations – 24 hours deadline

Emails in April threaten administrative fines and promote links disguised to steal sensitive data. Messages are signed by fictitious department heads. Avoid interaction and delete them promptly.

17 March 2026

Important inquiry: Delivery method for annual financial statements

Phishing attempts in March requested "urgent replies" while threatening account suspensions for non-response. Avoid engaging with these emails, as scammers aim to collect sensitive corporate information.

11 February 2026

Official notice regarding stored company information

February emails accuse recipients of neglecting "required updates," urging them to visit fraudulent online portals. Delete these emails without clicking any links.

29 January 2026

Request to update your data

An email falsely claiming to originate from Deutsche Industrie- und Handelskammer urged corporate data updates using fabricated reference numbers. These scams should be deleted immediately.

26 January 2026

Status update on company data

January emails falsely reported unfinished data updates at DIHK, providing links to phishing sites aimed at stealing corporate information. Delete these messages.