Skip to content
Scammers.com
ImpersonationReviewed

CSSF warns of fraudsters impersonating Union Bancaire Privée (Europe) via myubp.private-secure.com

Luxembourg's financial regulator, the CSSF, published a warning on 10 November 2026 about identity theft and illicit activities by unknown persons impersonating Union Bancaire Privée (Europe) S.A. The CSSF lists the w…

First reported
Reports
1

Source: cssf.lu · published

Illustration: Impersonation scams

What happened

Luxembourg's financial regulator, the CSSF, published a warning on 10 November 2026 about identity theft and illicit activities by unknown persons impersonating Union Bancaire Privée (Europe) S.A. The CSSF lists the website www.myubp.private-secure.com, the email address contact@ubp-france.com and addresses in the form firstname.lastname@gestionubp.com, telephone numbers +33 (0) 7 43 13 38 37 and +41 (0) 2 15 19 24 52, and an alleged registered office at 287-289 route d'Arlon, L-1150 Luxembourg. The CSSF states that the real company, Union Bancaire Privée (Europe) S.A., is not related to the activities.

How the scam works

According to the CSSF, unknown persons are impersonating Union Bancaire Privée (Europe) S.A. through www.myubp.private-secure.com, the email address contact@ubp-france.com, addresses in the form firstname.lastname@gestionubp.com, two telephone numbers and an alleged registered office in Luxembourg. The CSSF states that the real company is not related to those activities.

Impersonation of a private bank typically involves emails or calls that ask a customer to confirm a transfer, log in to a "secure" portal or move assets to a supposedly safer account. Do not use contact details supplied in an unexpected message. Reach the real bank only through a number or address you already have from a statement or the bank's official website. The CSSF's warning is the official notice that these particular channels are not the bank's.

Banks do not move customers onto a new 'private-secure' domain by surprise. If a message used the Union Bancaire Privee name and a login you do not already use, treat it as hostile even if a Luxembourg address appears in the footer.

Source

Commission de Surveillance du Secteur Financier (CSSF), 10 November 2026: https://www.cssf.lu/en/2026/11/warning-concerning-fraudulent-activities-by-persons-misusing-the-name-of-union-bancaire-privee-europe-s-a-2/

Red flags

  • A message or call claiming to be Union Bancaire Privee (Europe) that you did not expect.
  • A request to log in at myubp.private-secure.com or to email contact@ubp-france.com or a gestionubp.com address.
  • Telephone numbers such as +33 (0) 7 43 13 38 37 or +41 (0) 2 15 19 24 52 offered as bank contact details.
  • A request to confirm a transfer or move assets to a secure account.

If you were targeted

  1. 1Do not use contact details supplied in an unexpected message.
  2. 2Reach the real bank only through a number or address you already have from a statement or the official website.
  3. 3If you entered login details, contact the real bank at once using a known number and change your passwords.
  4. 4If you sent money, tell your bank immediately.
  5. 5Report the approach to the CSSF and to the real Union Bancaire Privee (Europe).

BaFin warns of fixed-deposit offers emailed from @santander-finance-europe.de posing as Santander

Germany's financial regulator BaFin published a warning dated 11 November 2026 about fixed-term and overnight deposit offers sent from email addresses with the domain @santander-finance-europe.de. BaFin suspects the u…

  • santander-finance-europe.de
  • BaFin warning 11 Nov 2026; sender email domain @santander-finance-europe.de
  • BaFin warning, 11 November 2026
Reported Nov 11, 20261 report
OtherReviewed

Ohio AG: 17 indicted over alleged schemes to take $228,000 from OCSEA union's education-benefit trust

Ohio Attorney General Andy Wilson announced on 12 November 2026 that a Delaware County grand jury indicted 17 members of the Ohio Civil Service Employee Association (OCSEA) for allegedly stealing or trying to steal $2…

  • OCSEA Union Education Trust; Warrensville Developmental Center; Delaware County, Ohio
  • Embezzlement and diversion-of-funds cases (12 Nov 2026)
Reported Nov 12, 20261 report

Kerala police: six arrested in Vadakara for allegedly renting bank accounts to cyber fraudsters

Onmanorama reported on 11 November 2026 that police in Vadakara, Kozhikode, Kerala, arrested six people as part of Operation Cy-Hunt, a statewide drive against cyber financial fraud and illegal banking transactions. T…

  • Operation Cy-Hunt; accused: Arun, Vivek Santhosh, Devjith Sunil, Anurag, Sajeesh, Shoukath Ali
  • mule bank accounts sold or rented to cyber-fraud gangs
Reported Nov 11, 20261 report