Combating cybercrime
Under certain conditions, the registries for the “.ch” and “.swiss” domain are required to block domain names suspected of being used for phishing, for the distribution of harmful software ("malware") or to support such activities.
The measures to combat cybercrime using domain names as laid down in the Ordinance on Internet Domains (OID; CC 784.104.2) apply to top-level internet domains for the management of which the Confederation is responsible, i.e. the ".ch" and ".swiss" domains; in particular, they give the registries responsible for the management of these resources the possibility of temporarily blocking ".ch" and ".swiss" domain names where there are reasonable grounds to suspect that they are being used:
- to access sensitive data using illegal methods (phishing)
- to distribute or operate harmful software ("malware") or
- to support any of these activities.
Registries are, moreover, obliged to block these domain names at the request of an anti-cybercrime service recognised by OFCOM.
Under Article 15 para. 1 let. b of the OID, it is OFCOM's task to recognise the services which may request the ".ch" and ".swiss" registries to block domain names. Recognition of such a service is not automatic, but requires that the requesting service submits a justified written recognition request to OFCOM (cf. Section 5 of the Technical and Administrative Regulations regarding the assignment and management of ".ch" domain names, CC 784.101.113/2.13 and Section 9 of the Technical and Administrative Regulations regarding the assignment and management of ".swiss" domain names, CC 784.101.113/2.14).
List of recognised anti-cybercrime services according to Art. 15 para. 3 OID (CC 784.104.2)
National Cyber Security Centre NCSC
Schwarztorstrasse 59
CH-3003 Bern
email: incidents@ncsc.ch
Website: www.ncsc.admin.ch
Activities
The National Cybersecurity Centre (NCSC) is the Confederation's competence centre for cybersecurity and thus the first contact point for businesses, public administrations, educational institutions and the general public for cyberissues.
Date of recognition
15.06.2010
Zurich Cantonal Police
Cybercrime Division Güterstrasse 33
P.O box
CH-8010 Zurich
email: http://www.kapo.zh.ch
Activities
Cybercrime investigative procedures.
Operation – jointly with the Zurich Public Prosecutor’s Office and the City Police – a centre of cybercrime competence.
Date of recognition
09.02.2018
Kantonspolizei Bern
Kriminalabteilung
Dezernat Digitale Kriminalität
Nordring 30
Postfach
CH-3001 Bern
email: https://www.police.be.ch/de/start/ueber-uns/kontaktformular.html
Activities
Unit coordinates and conducts investigations in the field of cybercrime.
Date of recognition
03.04.2019
Federal Office of Police fedpol
Guisanplatz 1A
CH-3003 Berne
email: Contact Form
Website: http://www.fedpol.admin.ch
Activities
Combating cybercrime, detecting offences committed on the Internet, prosecuting serious cross-border crime, coordinating and supporting investigation procedures at both national and international levels.
Date of recognition
03.10.2019
Zuger Polizei
Dienst Cyber- und Wirtschaftsdelikte Fachstelle Cyber An der Aa 4
CH-6300 Zug
Tel. +41 (0)41 728 41 41
email: cybercrime.polizei@zg.ch
Website: http://www.zugerpolizei.ch
Activities
Investigation procedures and prevention in the field of cybercrime and digitalised crime, Cybercrime Coordination Unit.
Date of recognition
10.12.2019
Kantonspolizei Schwyz
Kriminalpolizei
Dienst Cybercrime
Sicherheitsstützpunkt
Biberbrugg
Einsiedlerstrasse 55
CH-8836 Bennau
Tel. +41 (0)41 819 59 86
email: cybercrime.polizei@sz.ch
Website: http://www.sz.ch/polizei
Activities
The Cyber Crime Service strives to ensure greater safety in the digital environment through its prevention efforts and repression measures, and conducts investigations in the area of cyber crime in consultation with the public prosecutor's office. The Service investigates all forms of cyber crime.
Date of recognition
19.03.2020
Police cantonale vaudoise
Brigade Analyse Traces Technologiques (BATT)
Division Enquête Cyber (DEC)
Route de la Lanterne
CH-1014 Lausanne ADM
Tel. +41 (0)21 644 44 44
email: info.police@vd.ch
Website: https://votrepolice.ch/
Activities
Investigation procedure and prevention assistance in the field of cybercrime.
Date of recognition
08.06.2020
Swissmedic
Medicrime MKA
Hallerstrasse 7
CH - 3012 Bern
Tel. +41 (0)58 414 00 40
email: medicrime@swissmedic.ch
Website: www.swissmedic.ch
Activities
Detecting and fighting against fraudulent activities (in particular Phishing) in connection with the online purchase of medicinal products.
Date of recognition
23.04.2021
Polizei Basel-Landschaft
Kriminalpolizei
Cybercrime
Rheinstrasse 25
4410 Liestal
Tel. +41 (0)61 553 35 35
email: pol.staberm@bl.ch
Website: www.polizei.bl.ch
Activities
The Cybercrime Competence Centre is the coordination unit for cybercrime investigations within the Basel-Landschaft police force. As such, it is the central point of contact for members of the force in investigation support for such offences. The Cybercrime Competence Centre also acts as a single point of contact for external partners, such as public prosecutors’ offices and other police forces.
Date of recognition
17.12.2021
Etat-major de la Police Judiciaire
Case postale 236
1211 Genève 8
email: chefpj@police.ge.ch
Brigade de Criminalité Informatique (BCI)
Boulevard Carl-Vogt 17-19
1206 Genève
Tel : +41 (0)22 427 55 80
Brigade des Cyber Enquêtes (BCE)
Boulevard Carl-Vogt 17-19
1206 Genève
Tel : +41 (0)22 427 94 20
Website: https://www.ge.ch/criminalite-internet
Activities
BCI:
Specialises in the forensic analysis of various digital media and supports the BCE in the analysis of cybercrime-related activities in general.
BCE:
Responsible for police investigations related to the main current cybercrime-related activities, including economic cybercrime, sexual cybercrime, reputational cyber damage and fraudulent practices.
Date of recognition
14.01.2022
Kantonspolizei Graubünden
Kriminalpolizei
Cybercrime Dienst
Ringstrasse 2
7000 Chur
email: Kontaktformular
Website: www.kapo.gr.ch/cybercrime
Activities
The Cybercrime Unit of the Cantonal Police of Graubünden is a specialised unit for combating cybercrime. On the one hand, it conducts its own investigations in the field of cybercrime in the strict sense (malware, hacking, phishing, DDoS, botnet, etc.), but also in the field of investigations in the broad sense (fraud, threats, etc.).
Date of recognition
22.11.2022
Polizia Cantonale
Reparto Giudiziario 4
Sezione Analisi Tracce Informatiche (SATI)
Via Bossi 2b
6900 Lugano
email: sati@polca.ti.ch
Website: www.polizia.ti.ch
Activities
The Cyber Investigations Unit within SATI mainly conducts investigations in the area of cybercrime, more specifically investigations related to major technical cybercrime incidents (phishing, hacking, malware, botnet, DoS/DDoS, etc.).
Date of recognition
14.12.2022
Police cantonale
Police de Sûreté
Commissariat cybercriminalité
Place Notre-Dame 2
1700 Fribourg
Tel. +41 (0)26 305 18 66
email: cybercrime@fr.ch
Activities
The Cyber Investigation Unit within the Cybercrime Commissariat of the Cantonal Police of Fribourg is the coordination unit responsible for cybercrime investigations as well as the corresponding prevention. It acts as SPOC for external partners such as public prosecutors and conducts investigations in the field of cybercrime in the narrower sense (phishing, hacking, malware, botnet, DoS/DDoS, etc.). It provides support in digital crime investigations (cybercrime in the broader sense).
Date of recognition
24.01.2023
Kantonspolizei St.Gallen
IT-Forensik & Cybercrime
Klosterhof 12
9001 St.Gallen
Tel. +41 (0)58 229 49 49 (Hauptnummer Kapo SG)
email: kp-postmaster@kapo.sg.ch
Activities
The IT Forensics & Cybercrime Division (IFC) is the coordination unit for all cybercrime investigations within the Cantonal Police of St. Gallen. The IFC Division consists of two groups: Cyber Investigation & Data Analysis (IFC1) and IT Forensics & Technical Surveillance (IFC2). The latter is also responsible for investigations of cybercrime incidents in the narrower sense (malware, hacking, phishing, DDoS, botnet, etc.) as well as technically complex facts related to other cybercrime incidents (broader sense).
Date of recognition
01.12.2023
Police neuchâteloise
Brigade des cyberenquêtes et brigade d'investigation numérique
Rue des Poudrières 14
Case postale
CH-2000 Neuchâtel
Service de piquet: +41 (0)32 889 90 00
email: pn.cyber@ne.ch
Activities
The squad is responsible for handling cybersecurity cases and complaints within the Neuchâtel police force. It supports the Gendarmerie and liaises with the Office of the Public Prosecutor in Neuchâtel. It also undertakes prevention tasks.
Date of recognition
12.12.2023
Guidelines for interpreting the measures to be taken in cases of suspicion of abuse (Art. 15 et seq. OID)
This document is intended to assist anti-cybercrime services recognised by OFCOM in taking suitable measures in cases of suspected abuse involving .ch or .swiss domain names.
This document ist available in German, French and Italian. Please click on the desired language above in the Navigation Menu.
Legal basis
ODI Ordinance on Internet Domains (CC 784.104.2)
CC 784.101.113/2.13 The allocation and adminstration of second level domain names, which are subordinate to the domain “.ch”
CC 784.101.113/2.14 The allocation and adminstration of second level domain names, which are subordinate to the domain “.swiss”
This documents are available in German, French and Italian. Please click on the desired language above in the Navigation Menu.