Scammers target Li Auto owners with threats to void vehicle warranties
Chinese carmaker Li Auto has warned customers about a new scam in which criminals pose as company representatives and send owners fake safety notices. The messages claim that the car’s airbags need to be inspected as part of a recall and that the owner must verify their details on a website within two hours. Otherwise, the scammers threaten to void the warranty.
Fake recall creates artificial time pressure
Li Auto’s legal department confirmed in an official statement that the company has not launched the airbag recall in question.
Scammers are sending text messages to car owners while posing as Li Auto representatives. The messages contain a link to a website that asks users to enter personal information, vehicle details and verification codes.
The criminals are using a classic phishing technique. The two-hour deadline and the threat of losing warranty coverage pressure recipients into acting quickly, making them less likely to check whether the notice is genuine.
Li Auto stresses that the recall mentioned in the messages does not exist and that the linked web address does not belong to the company.
Digital car key makes the scam particularly dangerous
Modern Li Auto models rely heavily on a digital user account. This account can be used to control the door locks, climate control and a range of other vehicle functions.
If criminals gain access to an owner’s authentication details, the consequences could extend beyond ordinary personal data theft.
Cases recently came to light in another market in which criminals took over Li Auto owners’ primary accounts and demanded a ransom to restore access. However, no direct link has been confirmed between the current scam in China and the earlier account takeovers.
Car owners should also be cautious
The Li Auto case has broader relevance to all internet-connected cars. When important vehicle functions depend on a smartphone app and a cloud service, user account security and owner authentication become part of the car’s reliability.
Manufacturers in Europe are subject to requirements for cybersecurity and software update management, but these do not eliminate the risk of phishing attacks.
Li Auto advises owners not to open suspicious links and to avoid entering personal information, vehicle details or verification codes on unfamiliar websites. Owners who have already shared their details should secure their accounts immediately and contact official customer support.
The most important lesson from this case is simple: a car’s digital security no longer depends solely on the manufacturer’s software. A single convincing-looking message could be enough to give a criminal access to far more than a conventional online account.
