{"success":true,"data":{"id":"drv-rentenversicherung-german-pension-phishing","label":"German pension-phishing impersonating the Deutsche Rentenversicherung (DRV-Bund + 14 regional bodies). Targets ~57M German pensioners + contributors. German-language panic hook: \"Rentenbescheid,\" \"Rentenanpassung,\" \"drohende Rentenkürzung,\" \"Rentenauszahlung ist gefährdet,\" \"Rentenkonto überprüfen,\" \"Sozialversicherungsnummer bestätigen\" + credential-harvesting link on a non-DRV host (legit DRV only uses deutsche-rentenversicherung.de / rentenversicherung.de / drv-bund.de). Age-demographic weapon: retirees receiving monthly pension payments click panic narratives faster than younger cohorts. Evidence: DRV-Bund official Phishing-Warnungen page; BSI CS-Warnungen 2026; Heise + Spiegel + Süddeutsche Zeitung Feb 2026 coverage; Verbraucherzentrale + Stiftung Warentest senior-fraud advisories. Closes the non-English regional-coverage set (Spanish LATAM + Japanese + Brazilian + German)","description":"German-language phishing that impersonates the Deutsche Rentenversicherung (DRV) — Germany's federal pension insurance body, which covers approximately 57 million active contributors and retirees. The attack surface covers the umbrella DRV-Bund plus the 14 regional bodies (Nord, Mitteldeutschland, Rheinland, Baden-Württemberg, Bayern Süd, Bayern Nord, Braunschweig-Hannover, Berlin-Brandenburg, Westfalen, Schwaben, Saarland, Hessen, Oldenburg-Bremen, Rheinland-Pfalz). The signal fires on a DRV brand mention + a German-language pension-specific panic hook (\"Rentenbescheid,\" \"Rentenanpassung,\" \"drohende Rentenkürzung,\" \"Rentenauszahlung ist gefährdet,\" \"Überprüfung Ihres Rentenkontos,\" \"Sozialversicherungsnummer bestätigen,\" \"drohender Zahlungsstopp,\" \"Rentenkonto ist gesperrt,\" \"Beitragszeiten\") + a credential-harvesting link on a host that is NOT deutsche-rentenversicherung.de / rentenversicherung.de / drv-bund.de. Primary victim demographic: retirees receiving monthly pension payments, who historically click panic narratives about pension reduction or suspension at much higher rates than younger cohorts — the age profile makes this attack uniquely lucrative for the fraudsters. Evidence: the DRV-Bund publishes an ongoing \"Phishing-Warnungen\" page documenting current campaigns; the BSI (Bundesamt für Sicherheit in der Informationstechnik) issued CS-Warnungen throughout 2026 about DRV impersonation waves; Heise, Spiegel, and Süddeutsche Zeitung covered a February 2026 wave targeting pensioners; Verbraucherzentrale and Stiftung Warentest publish senior-fraud advisories specifically calling out the DRV-impersonation pattern. Distinct from generic SSN / tax phishing because the Deutsche-Rentenversicherung + Rentenbescheid combination is uniquely German — Switzerland uses AHV (Alters- und Hinterlassenenversicherung), Austria uses PVA (Pensionsversicherungsanstalt), and no English-language pension phishing uses the specific German compound-noun pension phrasing (Rentenbescheid, Rentenanpassung, Rentenkürzung). This iter closes the engine's non-English regional-coverage set: Spanish/Portuguese LATAM (iter 1059 Casbaneiro), Japanese (iter 1063 Yamato/Sagawa), Brazilian (iter 1067 PIX/boleto), and now German. Warning signs: any German-language email claiming a pension matter where the sign-in link is hosted anywhere other than the three official DRV domains. Go directly to deutsche-rentenversicherung.de via a bookmarked URL, or phone the DRV service hotline on 0800 1000 4800 if in doubt.","tier":"danger","category":"phishing","isThin":false}}