Fake MyGuichet 'digital green card' page lu-carte.com charges EUR 4.99 and steals card and LuxTrust data

What happened

MalwareTips reports a scam imitating Luxembourg's Guichet/MyGuichet government portal that offers an electronic motor-insurance green card for a EUR 4.99 conversion fee. Citing GOVCERT, which identified the phishing campaign and published its page sequence, MalwareTips names lu-carte.com as the malicious domain. The process seeks personal details, payment-card data and LuxTrust credentials. The real Guichet/MyGuichet services are impersonated and not accused.

How the scam works

The fake page claims the paper insurance 'green card' is being replaced by a digital version and invites drivers to convert theirs for EUR 4.99. Using MyGuichet's look and an everyday administrative topic makes the small charge seem believable. The process then asks for personal details, card data and LuxTrust credentials.

Luxembourg's government computer emergency response team, GOVCERT.LU, has documented a series of phishing campaigns that copy trusted local services and end by asking for LuxTrust credentials. LuxTrust is the digital identity used to sign in to Luxembourg banks and government services, so those details let criminals log in as the victim, approve payments and open further fraud. Small fees, such as a few euros for a 'conversion' or 'procedure', make the request seem routine and also capture full card details.

MyGuichet and Guichet.lu are impersonated and are not involved. Information on motor insurance documents should come from your insurer or the official guichet.lu website, not from a link. If you entered card details, block the card with your bank. If you entered LuxTrust credentials, contact LuxTrust as well.

Source

MalwareTips, "MyGuichet Green Card Scam" (published 25 October 2026).