France is a remarkably safe country by most measures but its digital landscape has a predator problem. Scams targeting international students have surged in recent years, and newcomers are disproportionately hit because they do not yet know what normal looks like. This guide tells you exactly what to watch for.
2026 Regulatory Alert: New ARCEP anti spoofing rules came into force on 1 January 2026. Calls from French mobile numbers originating abroad must now display as "hidden number" (numéro masqué) rather than showing a local French number. If you receive a call appearing to come from a French bank, prefecture, or government number and the caller asks for personal details, treat it with extreme suspicion. The old spoofing trick has been harder to pull off since January 2026, but fraudsters are adapting quickly.
France is not uniquely dangerous online, but it is uniquely confusing if you are new. You are managing your first carte de séjour, opening a bank account, looking for housing, and doing all of it in a language you may not yet read fluently. That is a scammer's dream demographic. Understanding the threat landscape before something goes wrong is far more valuable than knowing what to do after the fact.
The Fake Bank Advisor Scam (The Biggest Threat)
This is, by a wide margin, the most damaging scam hitting people in France right now. Fake bank advisor calls (vishing) are consistently reported by the Banque de France as the leading category of digital banking fraud. Here is how it works: someone calls claiming to be from your bank's security team (service fraude). They tell you there has been suspicious activity on your account and they need to verify your identity. They sound professional. They may already know your name, your bank's name, and the last four digits of your card, data bought from leaked databases.
What they want is your online banking password, your OTP (one time password), or for you to confirm a transaction they have already initiated.
Your bank will never call and ask for your password or OTP. Ever. This applies to BNP, Société Générale, Crédit Agricole, Boursorama, Revolut, and every other institution. If you get this call, hang up. Call your bank directly using the number on the back of your card.
Warning: If you are mid call and unsure, do not ask the caller for their callback number and ring it. Scammers can keep your line "open" for a short period and redirect your outbound call. Always hang up, wait a full minute, and dial the bank's official number yourself.
Housing Scams: The Apartment That Does Not Exist
You will search for housing on LeBonCoin, Facebook Marketplace, and Airbnb style platforms. On all three, fake listings are common. The signature: the rent is slightly below market rate, the photos are beautiful, the "landlord" is conveniently abroad or unavailable to show the flat in person, and they ask you to pay a deposit via wire transfer before signing anything.
In India, you are accustomed to viewing flats in person before paying. That instinct is correct, keep it. In France, no legitimate landlord takes a deposit before a lease is signed and before you have seen the property in person. Full stop.
Other red flags: the listing uses stock photography (run images through Google reverse image search), the price is far below comparable flats in the same arrondissement, or communication happens entirely in broken French or suspiciously perfect English.
If you are in India and searching for housing in France before you arrive, use only CROUS (Centre Régional des Œuvres Universitaires et Scolaires), institutional residences linked to your university, or short stay platforms with verified host ratings. Commit to nothing involving a private wire transfer.
Phishing Emails Impersonating French Institutions
You will receive emails that look exactly like messages from CAF, Ameli, the prefecture, or your university. The formatting is often convincing. The "call to action" is always the same: click a link, log in, and provide your details.
CAF and Ameli do communicate by email, but they do not ask you to re enter your password or bank details via an email link. Go directly to the official site (caf.fr or ameli.fr) and log in from there. Never click login links in emails claiming to be from these institutions.
The safest habit: bookmark the official portals in your browser from day one. CAF, Ameli, and impots.gouv.fr. Any email that asks you to "verify your account" via a link should be navigated to independently, not through that link.
Tip: If you receive a suspicious email claiming to be from a French government body, you can report it at signal-spam.fr (the national spam reporting portal) and cybermalveillance.gouv.fr, which is France's official cybercrime victim assistance platform.
The "Préfecture Appointment" Scam
This one specifically targets international students and visa holders. Scammers know that getting a titre de séjour appointment at the préfecture is genuinely difficult, slots disappear within minutes of being released. They exploit this anxiety by selling "guaranteed" appointments on unofficial platforms, charging €50 to €200 for something that is legally free.
Préfecture appointments are only bookable through the official portal at administration-etrangers-en-france.interieur.gouv.fr. There is no fee. There is no legitimate "appointment service." Anyone selling you access to this system is selling you something stolen, or taking your money for nothing.
If appointments in your area are genuinely exhausted, the correct move is to keep checking the portal. Slots open daily as cancellations happen or to contact your university's international student office, which sometimes has a dedicated préfecture liaison.
Cyber Safety Basics: What You Must Do in Your First Week
You do not need to become a cybersecurity expert. But a few practical steps cover the vast majority of risk:
- Set up a French phone number early. Your French SIM card is your second factor for banking OTPs. Losing it or not having one makes you more vulnerable to account takeover.
- Use a unique password for your French bank. Do not reuse your Gmail, Facebook, or Indian banking password anywhere.
- Enable two factor authentication on your email account. Your email is the master key to everything else.
- Be suspicious of urgency. Scams in all forms manufacture urgency, a 24 hour deadline to verify your account, an "arrest warrant" being issued, a housing deposit that will disappear if you do not pay now. Urgency is the mechanism, not the message.
If Something Goes Wrong
If you have been scammed, do not wait and do not feel embarrassed, it happens to French people too.
- Contact your bank immediately and ask to freeze the transaction or block your card.
- File a police report (plainte) at your local commissariat or gendarmerie. You will need this for any insurance claim or bank dispute.
- Report the scam to cybermalveillance.gouv.fr, France's official cybercrime support platform, which offers free guidance and can connect you with specialists.
- If the scam involved your titre de séjour or personal identity documents, inform your préfecture immediately.
France's banking consumer protection law requires banks to reimburse victims of unauthorised transactions in most circumstances but only if you report promptly and can demonstrate you did not voluntarily share your credentials.
This guide was drafted from verified service-public.fr sources. Always confirm details on the official website before taking action.
Questions People Actually Ask
Direct answers to the most common doubts about this process.