{"id":434261,"date":"2026-10-24T06:37:23","date_gmt":"2026-10-24T06:37:23","guid":{"rendered":"https:\/\/malwaretips.com\/blogs\/?p=434261"},"modified":"2026-10-24T06:37:23","modified_gmt":"2026-10-24T06:37:23","slug":"galaxus-survey-email-free-perfume-scam","status":"publish","type":"post","link":"https:\/\/malwaretips.com\/blogs\/galaxus-survey-email-free-perfume-scam\/","title":{"rendered":"Galaxus Survey Email Scam: The Free Perfume Offer That Steals Card Data"},"content":{"rendered":"<p>A Galaxus email invites you to answer a few shopping questions. As a thank-you, it offers a free bottle of perfume.<\/p>\n<p>The survey seems easy, and the gift looks worth a few minutes. The more important question comes after you&#8217;ve finished answering.<\/p>\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1310\" height=\"786\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/10\/galaxus-survey-email-free-perfume-scam-original-email.webp\" class=\"wp-image-434262\" alt=\"Original fraudulent Galaxus customer survey email offering free perfume, with recipient and sender details redacted by police\" title=\"\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/10\/galaxus-survey-email-free-perfume-scam-original-email.webp 1310w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/10\/galaxus-survey-email-free-perfume-scam-original-email-300x180.webp 300w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/10\/galaxus-survey-email-free-perfume-scam-original-email-1024x614.webp 1024w\" sizes=\"auto, (max-width: 1310px) 100vw, 1310px\" \/><\/figure>\n<h2>Overview<\/h2>\n<h3>A customer survey supplies the excuse for a free gift<\/h3>\n<p>The Galaxus survey email scam uses a familiar retailer&#8217;s identity to make an unsolicited offer feel like customer appreciation.<\/p>\n<p>It asks ordinary shopping questions before moving the participant toward gift selection and payment details. The apparent reward keeps the process feeling worthwhile.<\/p>\n<p>This is documented impersonation, not a dispute about a genuine Galaxus order. The real retailer is warning customers about the fraudulent approach.<\/p>\n<h3>The shipping payment is the point where the offer changes<\/h3>\n<p><a href=\"https:\/\/cybercrimepolice.ch\/de\/faelle\/gefaelschte-galaxus-umfrage-lockt-mit-gratisangebot\" target=\"_blank\" rel=\"noopener\">Swiss police describe a counterfeit survey and checkout<\/a> collecting contact information and card details under a free-gift pretext.<\/p>\n<p>The claimed small shipping cost makes providing a card seem reasonable. The information exposed can be used beyond that advertised amount.<\/p>\n<p>The original email above was published by police with identifying details obscured. It documents the invitation, not delivery of a perfume or an actual retailer promotion.<\/p>\n<h3>The retailer confirms the offer isn&#8217;t its reward program<\/h3>\n<p><a href=\"https:\/\/www.galaxus.ch\/en\/page\/phishing-alert-fake-galaxus-survey-uses-free-gift-as-bait-41877\" target=\"_blank\" rel=\"noopener\">Galaxus&#8217;s own warning<\/a> identifies the perfume lure and says stolen card information can be used for purchases at other online shops.<\/p>\n<ul>\n<li>Don&#8217;t pay to claim this emailed survey gift.<\/li>\n<li>Harmless questions don&#8217;t authenticate the website asking them.<\/li>\n<li>A copied checkout is still controlled by the counterfeit site.<\/li>\n<li>Contact your issuer if you entered card information.<\/li>\n<li>Keep an eye on follow-up messages using the address details you shared.<\/li>\n<\/ul>\n<h2>How a Few Innocent Questions Lower Your Guard<\/h2>\n<p>Shopping surveys are familiar. A question about delivery satisfaction doesn&#8217;t seem as dangerous as an immediate demand for a password.<\/p>\n<p>That makes the first click easier to justify. You may focus on answering correctly rather than checking who operates the page.<\/p>\n<p>The process also creates a sense of progress. After spending time on the questions, abandoning the reward can feel like wasting the effort.<\/p>\n<p>None of that effort obliges you to continue. The risk changes when the form moves from opinions about shopping to identity and financial details.<\/p>\n<p>You can stop even if the first screens seemed harmless. A sensible decision at the card form doesn&#8217;t become less sensible because you already completed a survey.<\/p>\n<p>There is also a difference between recognizing a brand and authenticating a promotion. The same logo can appear on genuine orders and fraudulent invitations.<\/p>\n<p>For this campaign, you don&#8217;t have to guess from design alone. The impersonated retailer has specifically warned about the free-perfume approach.<\/p>\n<h2>How the Galaxus Survey Email Scam Works<\/h2>\n<h3>Step 1: An invitation makes the reward feel connected to shopping<\/h3>\n<p>The email presents itself as a customer-satisfaction request. A perfume is offered as an incentive, making participation sound like a small benefit for a normal customer.<\/p>\n<p>Receiving it doesn&#8217;t prove that the sender knows your order history. A broad retailer-themed message can feel relevant to someone who shops online regularly.<\/p>\n<p>Don&#8217;t assume inclusion means selection. A line saying you were chosen for a gift can be written into every copy of a fraudulent email.<\/p>\n<p>Check a promotion through the genuine service before following it. The invitation&#8217;s own button isn&#8217;t an independent way to establish who sent it.<\/p>\n<h3>Step 2: A copied survey keeps attention on easy answers<\/h3>\n<p>The website asks about shopping habits, satisfaction, and product preferences. These subjects fit the retailer story, so the page may feel coherent.<\/p>\n<p>But relevant questions don&#8217;t make the destination authentic. Anyone imitating a retailer can ask what you usually buy.<\/p>\n<p>A completed progress indicator likewise shows only that the page recorded your answers. It doesn&#8217;t establish eligibility for a real promotion.<\/p>\n<h3>Step 3: Gift selection becomes a delivery-information form<\/h3>\n<p>The next stage asks where the supposed gift should go. A postal address and contact details seem natural once you&#8217;ve chosen something to receive.<\/p>\n<p>That expectation is useful to the scammer. Information you might refuse to provide in a random email can feel necessary for delivery.<\/p>\n<p>Consider each field separately. Your address and phone number can support convincing follow-up approaches even if you never proceed to the card screen.<\/p>\n<p>Don&#8217;t share identification documents to resolve a supposed delivery problem. Return to the real retailer if anyone introduces a further verification demand.<\/p>\n<h3>Step 4: The free item acquires a small shipping charge<\/h3>\n<p>A small payment is easier to accept when the gift seems valuable. The form makes the decision feel like paying postage rather than taking a financial risk.<\/p>\n<p>The copied checkout then requests card information. Those details don&#8217;t become limited to the advertised postage simply because that is the price printed above them.<\/p>\n<p>You&#8217;re not just deciding whether the postage is affordable. You&#8217;re deciding whether this site should have the details needed to use your card.<\/p>\n<h3>Step 5: The operator has details that can be reused elsewhere<\/h3>\n<p>The danger isn&#8217;t confined to waiting for a perfume that may never arrive. Contact and card information have already crossed the trust boundary.<\/p>\n<p>An unrelated merchant descriptor may appear if stolen details are used elsewhere. Report actual activity to your issuer rather than looking only for a Galaxus charge.<\/p>\n<p>You may also receive messages that refer to delivery, verification, or a failed order. Treat those as new requests requiring independent checks.<\/p>\n<p>The earlier form submission doesn&#8217;t authenticate a later caller. Someone knowing your address can be using information collected during the same deception.<\/p>\n<h2>The Fake Checkout Doesn&#8217;t Need Your Galaxus Password<\/h2>\n<p>The copied checkout doesn&#8217;t need access to your genuine shopping account to display an order summary and collect payment details.<\/p>\n<p>That matters after the incident. You can expose a card without losing the retailer login, so a password change alone may miss the urgent problem.<\/p>\n<p>Conversely, a card charge elsewhere doesn&#8217;t prove that the retailer&#8217;s payment system leaked your details. Explain the counterfeit form when reporting.<\/p>\n<p>If you also entered a password, include that separate disclosure. Don&#8217;t assume an account takeover merely because the page looked like Galaxus.<\/p>\n<p>The amount printed on the fake checkout is only part of the record. Compare it with your issuer&#8217;s history, including attempts you declined.<\/p>\n<p>You aren&#8217;t required to identify the operator before requesting protection. Tell the issuer what happened and let it investigate the transactions.<\/p>\n<p>A normal-looking Galaxus account therefore isn&#8217;t a reason to dismiss the card exposure. The genuine account and the counterfeit form are different places.<\/p>\n<h2>Checking a Galaxus Offer Without Completing the Claim<\/h2>\n<p>Open the retailer&#8217;s known site independently. Use its <a href=\"https:\/\/www.galaxus.ch\/contact\" target=\"_blank\" rel=\"noopener\">official contact and assistance page<\/a> to ask about the invitation.<\/p>\n<p>Don&#8217;t use the support link inside the survey for that check. The same operator can control the offer, checkout, and supposed help page.<\/p>\n<p>Explain the claim briefly: an emailed survey promises perfume and later asks for payment information. You don&#8217;t need to provide your card number to verify it.<\/p>\n<p>Keep a legitimate order question separate. An impersonation email doesn&#8217;t establish that your current shopping account, delivery, or return request has failed.<\/p>\n<p>Check the complete web address rather than a logo embedded in the page. A familiar brand word somewhere in an address isn&#8217;t sufficient.<\/p>\n<p>If you&#8217;re checking on a small screen, don&#8217;t let a hidden address bar become a reason to trust the design. Leave the page and use the genuine app.<\/p>\n<p>When warning someone else, describe the request instead of forwarding a clickable claim button. They can recognize the lure without opening the same destination.<\/p>\n<h2>If You Shared an Address but Stopped Before Payment<\/h2>\n<p>Sharing contact details is not the same as authorizing a card transaction. Avoid assuming the worst, but keep track of what you submitted.<\/p>\n<p>A later message may look more convincing because it knows the name, address, or phone number you gave. Don&#8217;t mistake that familiarity for independent verification.<\/p>\n<p>Check unexpected invoices against real orders. Don&#8217;t pay merely because a demand uses your correct delivery address.<\/p>\n<p>If an unfamiliar order appears in your genuine retailer account, contact its support. If it appears only in an email, verify it before treating it as real.<\/p>\n<p>Tell other household members if the shared address may receive suspicious approaches. They don&#8217;t need a copy of your full form submission to understand the warning.<\/p>\n<p>Keep monitoring proportionate. An exposed address doesn&#8217;t automatically mean every account is compromised, and it doesn&#8217;t require paying an identity-recovery service.<\/p>\n<h2>Give the Card Issuer the Right Story<\/h2>\n<p>When contacting the issuer, explain the counterfeit checkout first. Describing the incident only as a missing perfume can make it sound like an ordinary delivery dispute.<\/p>\n<p>Say what you entered: card number, expiry date, security code, and any later approval. Don&#8217;t send those complete secrets in an informal support message.<\/p>\n<p>Describe the promised shipping amount separately from actual card activity. If the amounts differ, preserve both instead of trying to make them fit.<\/p>\n<p>If a charge appears under another business name, give the exact descriptor to the issuer. Don&#8217;t accuse that business publicly without knowing how the transaction occurred.<\/p>\n<p>Keep your reference number and the instructions you receive. Note whether the issuer is addressing account protection, investigating a charge, or doing both.<\/p>\n<p>Ask whether you need to take another action after replacing the card. Don&#8217;t assume that blocking new use automatically completes every dispute about an existing transaction.<\/p>\n<p>If no charge is visible yet, the disclosure still deserves reporting. You aren&#8217;t required to wait for money to disappear before asking about protection.<\/p>\n<p>Save later account notices with the same record. A short timeline helps you explain new developments without reopening the counterfeit claim page.<\/p>\n<p>Continue checking through the issuer&#8217;s own system. The survey&#8217;s confirmation screen cannot tell you whether the card is secure or a disputed payment was returned.<\/p>\n<h2>What to Do if You Have Fallen Victim to This Scam<\/h2>\n<ol>\n<li>\n<p><strong>Abandon the gift claim.<\/strong> Don&#8217;t finish a payment, confirm a new charge, or supply another document because the site says the perfume is reserved.<\/p>\n<p>A completed survey doesn&#8217;t obligate you to proceed. Close the page and assess the specific details you already entered.<\/p>\n<\/li>\n<li>\n<p><strong>Protect an exposed card through its issuer.<\/strong> Contact the issuer using a trusted app or the contact printed on your card.<\/p>\n<p>Explain that you entered card details on a counterfeit Galaxus survey checkout. Ask whether blocking, replacement, or other immediate protection is required.<\/p>\n<p>Mention any authentication code or approval you supplied. Don&#8217;t wait for the advertised shipping charge before reporting the disclosure.<\/p>\n<\/li>\n<li>\n<p><strong>Review the real transaction history.<\/strong> Look for attempted or completed activity you don&#8217;t recognize, including purchases under unrelated merchant names.<\/p>\n<p>Use the issuer&#8217;s dispute process and ask about deadlines. Keep the actual amounts and currencies rather than relying on the offer&#8217;s promised total.<\/p>\n<\/li>\n<li>\n<p><strong>Change a password only where it was exposed or reused.<\/strong> If the false site requested an account login, replace it through the genuine service.<\/p>\n<p>Don&#8217;t assume every survey required a password. Report the fields you actually completed so support can distinguish card exposure from account access.<\/p>\n<\/li>\n<li>\n<p><strong>Tell Galaxus about the impersonation through verified assistance.<\/strong> Include the message and destination without sending passwords or full card information.<\/p>\n<p>The retailer can investigate misuse of its identity. Your issuer still needs a separate report to protect the payment method.<\/p>\n<\/li>\n<li>\n<p><strong>Retain the invitation and existing records.<\/strong> Save the sender details, claim wording, payment confirmation if any, and the time you submitted information.<\/p>\n<p>Don&#8217;t reopen the counterfeit checkout just to collect a better picture. Evidence already available can start the report.<\/p>\n<\/li>\n<li>\n<p><strong>Watch for misuse of the contact details.<\/strong> Independently check unexpected orders, delivery problems, or invoices that refer to the information you supplied.<\/p>\n<p>Don&#8217;t pay or provide identification because a follow-up knows your address. Verify through the real organization named in that new message.<\/p>\n<\/li>\n<li>\n<p><strong>Report losses through an official police channel.<\/strong> Keep the issuer&#8217;s case reference with the fraudulent email and transaction evidence.<\/p>\n<p>Ignore strangers promising a guaranteed refund for a fee. A missing gift doesn&#8217;t become recoverable simply because someone offers a special service.<\/p>\n<\/li>\n<\/ol>\n<h2>Frequently Asked Questions<\/h2>\n<h3>Is the Galaxus perfume survey confirmed phishing?<\/h3>\n<p>Yes. Swiss police and Galaxus identify fraudulent invitations, a copied shopping site, and a card-collection checkout, rather than a genuine perfume promotion.<\/p>\n<h3>Can a genuine retailer send customer surveys?<\/h3>\n<p>Yes. The warning concerns this documented gift-and-card lure. Check any uncertain invitation through the retailer&#8217;s independently reached assistance route.<\/p>\n<h3>Why do the first questions seem harmless?<\/h3>\n<p>They fit a normal shopping survey and make participation feel routine. The risk changes when the route requests contact or payment details.<\/p>\n<h3>Does the small shipping amount limit my potential loss?<\/h3>\n<p>No. Card information disclosed to a counterfeit checkout can be misused beyond the amount the page advertises.<\/p>\n<h3>What if my real Galaxus account looks normal?<\/h3>\n<p>A normal shopping account doesn&#8217;t make the counterfeit form safe. Contact your issuer after a card disclosure, even without evidence of a retailer-account takeover.<\/p>\n<h3>What if I only supplied my name and address?<\/h3>\n<p>Be alert to personalized follow-up and unexpected orders or invoices. That disclosure alone isn&#8217;t evidence that a card or shopping login was compromised.<\/p>\n<h2>The Bottom Line<\/h2>\n<p>Don&#8217;t pay to claim the perfume in this Galaxus survey email. The documented offer imitates a real retailer to collect personal and card information.<\/p>\n<p>If you entered a card, contact its issuer promptly. Report the imitation to Galaxus separately and verify any later order or delivery message independently.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A Galaxus email invites you to answer a few shopping questions. As a thank-you, it offers a free bottle of perfume. The survey seems easy, and the gift looks worth a few minutes. The more &#8230; <\/p>\n<p class=\"read-more-container\"><a title=\"Galaxus Survey Email Scam: The Free Perfume Offer That Steals Card Data\" class=\"read-more button\" href=\"https:\/\/malwaretips.com\/blogs\/galaxus-survey-email-free-perfume-scam\/#more-434261\" aria-label=\"Read more about Galaxus Survey Email Scam: The Free Perfume Offer That Steals Card Data\">Read more<\/a><\/p>\n","protected":false},"author":51,"featured_media":434262,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[49],"tags":[],"class_list":["post-434261","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scam-reports","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50","resize-featured-image"],"_links":{"self":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/434261","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/users\/51"}],"replies":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/comments?post=434261"}],"version-history":[{"count":1,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/434261\/revisions"}],"predecessor-version":[{"id":434263,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/434261\/revisions\/434263"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/media\/434262"}],"wp:attachment":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/media?parent=434261"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/categories?post=434261"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/tags?post=434261"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}