I’ve received this email which looks legit bit fulfills most of the criteria for a phishing. They ask me for an immediate action, emphasize that I have to do an action within a short (ten days) delay, don’t write my name in the message, don’t provide a link in plain text allowing me to see the URL.

I’m pretty sure it’s a legit email, but I’m a bit surprised they managed to make this email so similar to a phishing email.

by Interesting_Study228

10 comments

  1. As requested by the bot, here is a short message informing you that the information about the post are available in the caption

  2. How old is your Swiss pass ? I think after 5 years you need to change the photo, I remember getting this email and having to do it

    You can always login to your Swisspass account from the Swisspass website (not using this link) and check what it says there if you’re concerned.

  3. Click on the link and see to which domain it takes you.

  4. just ask in the local train station. It is most likely not a phishibg attempt got the same mail and It wasn’t. I agree that it is very fishy though sbb should change that.

  5. Not a scam, they want you to do change photos after like 5 years. However, you can just not do it and nothing will happen (except them sending you 2-3 more reminders). You can’t get fined and your abos can’t be disabled. I just ignored the request, now 3 years later I still have a photo from over 10 years ago on the Swiss Pass.

    Maybe that’s why it has that phishing mail look. They want to give the impression of urgency when there’s really nothing they can realistically do to enforce it.

  6. It’s legit but it could be worded better yeah. You don’t have to click on the link either, you can log in to your Swisspass account directly.

    I received it a few months ago, got a reminder and then uploaded it. A few days later I got the new card in the mail

  7. This is phising.

    If it was no scam, the would greet you by name.

  8. I find it somewhat suspicious that the ZVV (Zürcher Verkehrsverbund) is apparently named as the sender – not SBB.

  9. I would’ve thought it’s legit but it’s signed “ZVV contact” which is rather suspicious because they wouldn’t send an email with a design background that is probably not theirs. Either go ask at the train station or do nothing and wait until you get checked on the train or something, the ticket inspector will tell you to provide a new photo. You can also do this in person.

    Also the wording with “télécharger” is weird imo. It’s also weird that “ZVV-Contact” suddenly speaks French. And usually, legit emails from Alliance Swisspass aren’t signed by ZVV and include your name.

  10. Simply log into your SwissPass account through the usual means. If action is needed you will also see it there. This is always the way to go if you are asked for immediate action.

    >don’t provide a link in plain text allowing me to see the URL.

    It is always possible to see where a link takes you before you open it. If you are using a tablet or phone, this usually means touch and hold. After some time the link address will be revealed.

Leave a Reply