Fight against phishing What does the Federation do with my phishing report?

The Swiss Federal Office for Cybersecurity (BACS) has confirmed that citizens can report phishing attempts through its dedicated website, antiphishing.ch. This service allows individuals to flag suspicious emails or websites, which are then analyzed using artificial intelligence (AI) before being reviewed by human experts. On August 17, 2026, a man from the canton of Bern shared his concerns over how the federal government handles such reports. He noted that upon submitting a phishing email, he received a message stating, “Warning: This mailbox is not read, but processed automatically.” The man questioned whether the federal authorities were taking meaningful action with the information he had provided. He also sought clarification from the SRF consumer magazine Espresso regarding the effectiveness of the measures taken by the BACS. The BACS processes approximately one million phishing reports annually, according to Roman Hüssy, co-leader of the relevant department, Govcert. AI plays a crucial role in this process, helping to filter out dubious submissions before they reach human reviewers. These reviewers determine whether the flagged content constitutes genuine phishing activity. Without AI, handling such a high volume of reports would be nearly impossible. The system ensures that only verified threats receive further attention, allowing the BACS to focus its limited resources on the most pressing cyber risks. As outlined on its official website, the BACS serves as the national center for cybersecurity, acting as the primary point of contact for businesses, public institutions, and individuals facing cyber threats. Its responsibilities include coordinating the implementation of Switzerland’s National Cyber Strategy (NCS), raising awareness among the public about online dangers, and supporting critical infrastructure operators during cyber incidents. It conducts technical analyses to assess and counter cyber threats while identifying and addressing vulnerabilities in the country’s digital defenses. However, the BACS does not have authority to conduct criminal investigations. That responsibility lies with law enforcement agencies, including state prosecutors and police forces. Roman Hüssy clarified that the BACS does not investigate the perpetrators of cyberattacks directly. Instead, it forwards any leads or evidence related to potential offenders to the appropriate legal authorities. While the agency works closely with internet service providers both domestically and internationally to block known phishing domains, it lacks the power to enforce such actions unilaterally. Businesses affected by phishing campaigns may take their own steps, such as warning customers or strengthening security protocols. The BACS supports these efforts through education and guidance but does not issue binding directives. The effectiveness of the BACS’s measures remains a subject of debate. Hüssy acknowledged that phishing websites often resemble disposable pages, once blocked, new ones quickly replace them. This creates a continuous cycle of threat detection and response. Additionally, tracing the origins of cybercriminals is complicated, especially when attackers operate outside Switzerland. International cooperation in cybercrime investigations is frequently hindered by jurisdictional challenges and varying levels of commitment among countries. As a result, combating phishing requires ongoing effort and collaboration across multiple sectors. The SRF consumer magazine Espresso expressed interest in hearing more from the public, particularly from individuals who have submitted phishing reports. Hüssy emphasized that even though individual reports may not lead to direct action, they contribute to the broader effort of identifying and neutralizing cyber threats. Every reported phishing site represents a potential risk to users, and early identification helps prevent wider harm. The BACS continues to rely on citizen participation to maintain a robust defense against evolving cyber threats.