What happened
Luxembourg's financial regulator, the CSSF, published a warning on 10 November 2026 about identity theft and illicit activities by unknown persons impersonating Union Bancaire Privée (Europe) S.A. The CSSF lists the website www.myubp.private-secure.com, the email address contact@ubp-france.com and addresses in the form firstname.lastname@gestionubp.com, telephone numbers +33 (0) 7 43 13 38 37 and +41 (0) 2 15 19 24 52, and an alleged registered office at 287-289 route d'Arlon, L-1150 Luxembourg. The CSSF states that the real company, Union Bancaire Privée (Europe) S.A., is not related to the activities.
How the scam works
According to the CSSF, unknown persons are impersonating Union Bancaire Privée (Europe) S.A. through www.myubp.private-secure.com, the email address contact@ubp-france.com, addresses in the form firstname.lastname@gestionubp.com, two telephone numbers and an alleged registered office in Luxembourg. The CSSF states that the real company is not related to those activities.
Impersonation of a private bank typically involves emails or calls that ask a customer to confirm a transfer, log in to a "secure" portal or move assets to a supposedly safer account. Do not use contact details supplied in an unexpected message. Reach the real bank only through a number or address you already have from a statement or the bank's official website. The CSSF's warning is the official notice that these particular channels are not the bank's.
Banks do not move customers onto a new 'private-secure' domain by surprise. If a message used the Union Bancaire Privee name and a login you do not already use, treat it as hostile even if a Luxembourg address appears in the footer.
Source
Commission de Surveillance du Secteur Financier (CSSF), 10 November 2026: https://www.cssf.lu/en/2026/11/warning-concerning-fraudulent-activities-by-persons-misusing-the-name-of-union-bancaire-privee-europe-s-a-2/