Government issues phishing alert as ID-Austria users targeted during weekend maintenance

Austria’s e-Government portal oesterreich.gv.at has warned citizens and residents about a wave of fraudulent text messages urging them to “renew” or “re-register” their digital identity (ID Austria) via embedded links. The alert was published on 19 July, coinciding with scheduled maintenance windows on 18 and 19 July that temporarily limited some ID-Austria functions such as remote signature activation and eAusweise downloads. The fake SMS directs users to copycat websites that harvest login credentials and, in several cases reported to the Interior Ministry’s cybercrime unit, ask for credit-card details under the pretext of paying an “activation fee”. ID Austria is Austria’s high-assurance eID compliant with the EU’s eIDAS regulation and is increasingly required for visa appointments, residence-permit renewals, tax filings and commercial KYC processes, making it a lucrative phishing target. Because many expatriates and cross-border workers rely on ID Austria to access the Aliens Information System (AIS) and the new eAusweise app that stores digital driving licences, the attack has direct implications for global-mobility compliance. Employers sponsoring Red-White-Red Card holders are urged to remind staff that official correspondence never asks for bank data and that genuine renewals are handled exclusively via the existing oesterreich.gv.at or ID-Austria apps. The Digital Austria Service Centre recommends users who have clicked the link to change their ID-Austria PIN immediately and to file a report via the ‘Stopline’ portal. The government is also expediting two-factor push notifications for high-risk transactions and plans to roll out FIDO2 hardware-key support by Q4 2026. While the scheduled maintenance finished on time Sunday evening, the incident highlights the growing intersection of cybersecurity and mobility management: without a functional eID, foreign employees cannot complete online address registrations or obtain electronic extracts for visa extensions, potentially jeopardising legal stay.