A theatre invitation can seem ordinary enough to dispel suspicion. In a testimony published on 11 November by L’essentiel in Luxembourg, a contact met on an app suggests going to a show, then sends a link to a site presented as a ticketing service. The ticket shown costs 70 euros. This is when the date turns into a payment trap: the cultural pretext gives a concrete reason to take out a card before even checking whether the performance exists.
The scheme combines a romantic approach with a potentially fraudulent payment page. Asked by L’essentiel about this case, the Grand Ducal Police consider it likely that card details were collected for subsequent use in fraudulent payments. The useful check is to separate two questions: does the suggested show exist, and does the payment actually go through its ticketing service?
The invitation takes the conversation to payment
In the testimony reported by L’essentiel, the man first chats with a profile on a dating app, then on WhatsApp. After suggesting a meeting, his interlocutor sends him a link to buy a seat next to hers. The account mentions a 70-euro ticket and says that the man lost money. It does not establish the total amount debited or whether any further transactions were made afterwards.
The pretext turns an online relationship into a concrete plan: choosing a date, booking and paying. The request appears to concern the outing rather than the person met. This shift can lower one’s guard: you think you are buying a ticket, when in fact you are following the payment process specified by a contact whose identity has yet to be verified.
Afterwards, the man discovered that the play he had been offered was not scheduled in Luxembourg. This gives a practical check to make before any purchase: find the venue independently of the link received, then check its programme and the date directly on its official website. If the performance is not listed there, it is better to stop the purchase and ask the venue to confirm using the contact details published on its own website.
Two checks, two different questions
To check the show, start with the cultural venue: its website, calendar and, if necessary, its ticketing service accessed from that site. To check the payment, look at the page’s exact web address and confirm that it matches the service to which the venue directs you. A similar name or a well-presented page is not enough. If in doubt, do not enter your card details and do not continue via the link received in the conversation.
A padlock in the address bar indicates that the connection to the site is encrypted. It does not certify the seller’s identity or the honesty of the transaction. In other words, the padlock can protect the data being sent to the site you visit without proving that the site is the ticketing service it claims to be. Checking the domain and following the link from the official website answers a different question.
A reverse image search of the profile picture can also help establish whether a photo appears elsewhere under another name. BEE SECURE recommends this step for suspicious profiles. But not finding a result does not prove that the person is genuine: the photos may be new, not widely circulated or different. No single sign, whether a foreign number, an appearance or a photo, is enough to conclude that it is fraud. What matters is the request as a whole and whether what is being offered can be checked independently.
Payment can expose more than the ticket price
Romance scams often rely on trust being built before a request for money or data is made. The Europol information sheet distributed by the Grand Ducal Police advises people not to share card or account details with someone they have met online and not to rush. BEE SECURE also points out that an online relationship can be used as a pretext for financial requests. In the case of a fake theatre date, payment can be presented as a simple booking rather than as a transfer of money to the person.
The collection of bank details mentioned by the police remains a hypothesis in this case, not the result of a public assessment of the site. It nevertheless explains why the stakes may go beyond the ticket price: you need to protect the data you provide, and not try making another payment to test whether the page works.
According to the police, who were questioned by L’essentiel, 91 complaints of phishing were recorded in October, across all methods. This figure provides a reference point for phishing reports, but does not measure the number of victims of this particular method of theatre invitation. The police say that the procedure described was then unknown to them, while likening it to a combination of romance scam and phishing. The case therefore illustrates an adaptation of the pretext, not an established frequency for this particular scam.
If details have already been entered
If you have doubts after sharing your card details, contact your bank immediately through the usual channel, for example the number on your card or in the official banking app, to ask what security measures are appropriate. This does not guarantee a refund, but allows the situation to be reviewed promptly with the institution concerned.
It is also useful to keep the messages, the website address and any receipt, without returning to the page to make another payment. The profile can be reported to the dating app and the matter reported to the police. The Europol information sheet distributed by the Grand Ducal Police recommends keeping the conversations available, reporting the account and filing a complaint. In Luxembourg, BEE SECURE offers confidential help on 8002 1234.
Prevention does not mean suspecting every encounter. It means not relying on the same person for the suggestion of an outing, proof that it exists and the only way to pay for it. The official programme and ticketing service allow you to take control of that final step.
References
- L’essentiel: “Shall we go to the theatre?”: the latest scam on dating apps
- BEE SECURE: Romance scams
- Grand Ducal Police: Europol information sheet on romance scams
Illustrative photograph: an exchange on a phone does not, by itself, allow a ticketing service to be verified.






