[HR] Ladies and gentlemen… a 100% legit Croatian bank email that looks more scammy than an actual scam

This is a real email from PBZ (Privredna banka Zagreb, part of Intesa Sanpaolo Group), one of the biggest banks in Croatia. At first glance it looks exactly like a phishing attempt – strange formatting, awkward bilingual text, a big “Click here” link with a deadline, and then instructions to open an attachment afterwards.

It turns out this isn’t a scam at all. The bank itself confirmed it’s completely legitimate and this is actually how they send encrypted messages to customers.

The funny thing is that the whole thing looks more suspicious than most actual phishing emails. A perfect example of how poor design and communication can make legitimate emails feel like scams.