Verdict
postfinance.ch appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Institutional PostFinance page for private customers describing banking products and services (accounts, payments, savings, investments including crypto, mortgages, pensions), support channels and contact information. Appears legitimate and informational; contains login links to e-banking but no in-page credential harvesting forms in the provided snapshot. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 22 years oldRegistered history | Clear |
| Web archive | Archived since 20041053 snapshots | Clear |
| Certificate | Encrypted connectionIssued by SwissSign RSA TLS EV ICA 2022 - 1 | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2004.
- No flags from the reputation services TrustSniffer consulted at assessment time.
Full analysis
Overview
The website is PostFinance’s institutional banking platform for private customers, presenting information and access pathways for accounts, payments, savings, financing, investments, pensions, insurance, support, and e-banking. Its apparent business model is the provision of retail and related corporate financial services through account and card fees, transaction services, interest margins, and investment-related charges.
Scam/Impersonation Risk
No blacklist, phishing, brand-impersonation, or conflicting-identity indicators were observed. The homepage presents coherent institutional banking content, links to support and legal resources, and login navigation without an embedded credential-harvesting form; observed browser behavior also showed no external posting, wallet-drainer activity, hidden forms, or cloaking. This convergence supports an apparently legitimate, established site, while the operator’s real-world identity remains likely rather than independently verified.
- The private-customer homepage is identified as “PostFinance für Privatkunden” and contains structured banking navigation, support access, corporate links, and e-banking login links.
- The captured page contained 0 forms, no sensitive form, no password form submitted externally, and no hidden forms.
- External reputation checks recorded 0 malicious and 0 suspicious detections where evaluated, with no confirmed blacklist or phishing result; the domain is within the global top 1,000,000 traffic sites.
- The domain was registered in 2004 and is approximately 21.73 years old; archival records contain 1,053 snapshots spanning 2004–2025, covering 22 tracked years.
Regulatory Verification Notes
The site presents a substantial banking-service catalogue, including deposit accounts, cards, domestic and international payments, loans, mortgages, funds, ETFs, equities, crypto-related investment options, pensions, insurance, and advisory services. The supplied page evidence does not identify a specific licensing authority or license number, so regulatory authorization and the precise legal entity responsible for each service remain verification matters rather than established findings. A third-party broker-reference record associates the domain with “POSTFINANCE” in Switzerland and reports “No Regulation” with no license found; this is a contextual reputational signal, not a legal or regulatory determination, and does not create an identity contradiction.
- The homepage includes links or navigation for “Über uns und Jobs,” support, corporate information, sustainability, media, and investor-relations content.
- The supplied business-model record contains no claimed license authority or license number and marks licensing as unverified.
- The site is served from AS12511, identified as CH-POSTNETZ – Die Schweizerische Post AG, Switzerland.
- The transport certificate is EV-validated, issued by SwissSign RSA TLS EV ICA 2022 - 1 for PostFinance AG, and valid until 2026-10-28.
What to Verify Next
Before credential or payment interactions, the applicable legal entity and any relevant authorization should be matched against the competent Swiss registry using an independently sourced official route. The terms, service conditions, customer-protection arrangements, and—where applicable—returns or cancellation provisions should be reviewed for the specific product being considered. Official support channels should also be confirmed through an independent source rather than relying solely on contact details reached from the site.
- The homepage provides “Über uns und Jobs,” support, contact, legal/footer, and corporate-information pathways that can be reconciled against independent records.
- The navigation separates banking, financing, investing, pensions, insurance, and support areas, allowing the relevant terms and protections to be checked for each service.
- The page provides e-banking login navigation but no in-page credential form in the captured material, making independent confirmation of the official login route an appropriate procedural check.
Summary Verdict
The overall posture is high trust and low risk, and the available evidence is consistent with an established, apparently legitimate website. This conclusion supports normal site interaction in principle, but it does not independently prove the real-world operator identity or establish regulatory authorization for every service.
Infrastructure Integrity
The site resolves to infrastructure operated by CH-POSTNETZ – Die Schweizerische Post AG on AS12511 in Switzerland. No CDN or WAF was identified, and the infrastructure appears to expose likely origin hosting rather than a separate edge network; this is a structural observation, not evidence of maliciousness. The valid EV certificate provides a positive transport-integrity signal, while hosting attribution should be treated as mitigation and context rather than proof of legitimacy.
Closing Assessment
Proceed with ordinary independent identity, service-terms, and payment-protection checks before submitting credentials or authorizing payments, with the level of review matched to the financial significance of the intended interaction.
Written analysis generated 2026-08-11 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | LIKELY |
|---|---|
| Identity score | 80/100 |
| Identity verification confidence | 80% |
- Trusted social count=4
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of postfinance.ch.
- The request stayed on postfinance.ch. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2004-11-17. Clear
- It is hosted on CH-POSTNETZ, from a server in CH. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CH-POSTNETZ - Die Schweizerische Post AG, CH |
| Country | CH |
| Server IP | 2a00:17c9:0:103::205 |
| Name servers | Not available |
| SSL issuer | SwissSign RSA TLS EV ICA 2022 - 1 |
| SSL expiry | 2026-10-28 |
| Domain age | 21.73 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2004-11-17 |
| Archive snapshots | 1053 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about postfinance.ch at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.