Digital fraud
Connectivity and electronic communications services are now more essential to daily life than ever before. From accessing public services to staying connected, end users depend on secure, reliable and trustworthy digital interactions. Yet this dependency also means that the evolving digital communications landscape – driven by new technologies, shifting user behaviour and the growing dominance of digital platforms – poses challenges for the effectiveness of end-user rights as set out in the European Electronic Communications Code (EECC). The way people communicate is changing rapidly, and with it come questions about the ability of communications services to guarantee accessibility, security and protection.
Amid these developments, the rise of fraudulent activities and the misuse of numbering resources – such as spoofing, smishing and fraudulent callback schemes – has become a pressing concern. Fraud schemes have grown in both scale and sophistication, directly affecting end users and undermining confidence in the digital ecosystem. Beyond the immediate financial and emotional harm inflicted on individuals, these threats raise broader issues related to privacy, cybersecurity and the overall integrity of digital communications. In its recent Opinion under Article 123 of the EECC, BEREC highlighted digital fraud as one of the most significant and fast-growing trends impacting end users today.
Takeaways from the BEREC workshop
Recognising the urgency of these challenges, BEREC convened the workshop on practical issues preventing number misuse and possible fraudulent activities to foster a deeper understanding of emerging risks and explore solutions that strengthen trust in electronic communications. The workshop aimed not only to assess the current threat landscape, but also to reflect on the cross-sectoral implications.
The speakers highlighted that fraud is sophisticated, scalable and increasingly enabled by technological innovation, including artificial intelligence (AI). At the same time, they indicated that there is technology to combat scams. Market players outlined their investment in fraud prevention measures to identify, filter and block spoofing and scam calls, including number registries with blocklists to verify caller identity, technical signalling controls to authenticate calling line identification (CLI), and traceback and reconciliation processes to detect and eliminate abusive traffic at its source. Representatives of national authorities showcased some of the anti-fraud measures in place, such as call-blocking frameworks, roaming checks to block fraudulent calls pretending to originate in the same country, sender ID registries to protect consumers from fake SMS messages, AI-powered voice and SMS filtering, and cross-institutional agreements enabling real-time data sharing between telecom regulators, cybersecurity authorities, law enforcement and financial institutions.
However, without harmonised legal frameworks and stronger cross-border cooperation, its full potential cannot be realised. No single sector can tackle fraud alone. For example, while it may take months to roll out countermeasures, criminals can adapt their fraudulent measures in weeks. Regulatory action works, but it must be coordinated, future-proof, and supported by sufficient resources and legal clarity. As emphasised in its Input to the European Commission’s Call for Evidence on the Digital Fairness Act, BEREC reaffirms that effective protection against digital fraud requires clear consumer rights, robust complaint and redress mechanisms, and swift, coordinated enforcement across digital ecosystems. This approach emphasises the importance of cross-authority cooperation to effectively protect consumers in the face of evolving technological threats. The outcomes of ongoing reviews of consumer protection frameworks should address third-party fraudulent practices, with clear enforcement mandates and streamlined, cross-border collaboration, at the same time ensuring consumers are equipped with both preventive tools and practical remedies against fraud across the digital landscape.
Practical support for end users: Learn, Protect, Report
One of the key findings of the workshop is that user empowerment, education and awareness remain crucial, as manipulation, not technical weakness, is at the heart of many scams.
By staying informed, protecting their digital identity and reporting suspicious activity, end users can become an active part of the solution.
-
Learn to recognise red flags and fraudulent patterns
- Avoid rushed decisions: urgency is a red flag
- Verify the sender through trusted channels
- Be sceptical of unexpected ‘routine’ messages
- Guard your personal data and challenge unusual requests
-
Protect yourself with simple everyday habits
- Think before you click, and do not click on suspicious or unexpected links
- Use two-factor authentication wherever possible
- Secure your mobile number with PINs and SIM-swap protection
- Maintain basic digital hygiene: strong passwords, updates, minimal oversharing
-
Report digital fraud
- Helps block reused sender IDs, routes and domains
- Triggers investigations, alerts and enforcement
- Protects others by revealing patterns
- Reduces stigma and emotional stress for victims