According to the Agency for Digital Italy, a new scam has started based on a fake INPS message. In the text, usually received on Telegram, the possibility of obtaining a bonus of 280 euros is offered. To do this, a series of bank details are requested.
The hook is very simple. Arrives via message, with a text which says: “INPS: To continue with the payment of 280a, check the details on your account”. Then a link. And at this point a site that seems built exactly like the INPS one. The Computer Emergency Response Team of the Agency for Digital Italy (Cert-Agid) has published on its portal an alert for a new scam that seeks to exploit the name of the social security institution.
Based on the information that has been released, the scam arrives on Telegram. The message is distributed via a bot that pretends to be an official INPS account. It is for this reason that the scam falls into the group of scams carried out using the scam technique smishing: Phishing attacks that occur via message. It is the contraction of SMS + Smishing.
What data is requested by the fake INPS portal
To access the bonus of 280 euros users are asked for a series of information. The portal on which they will land is precisely for archive this data. From here they will be sold or used for new scams that may also have more serious consequences. Once your bank details have been collected, cyber criminals may also try to break into your account. Specifically, the data requested are:
He answers the call from the police and loses 39,000 euros: how the cloned numbers scam works
- Name and surname
- Tax ID code
- City
- Telephone number
- Credit card information
- Iban
Let’s clarify this. There is none INPS voucher of 280 euros ready to be distributed through a message campaign. Cert Agid’s advice is to always check the platform where you are when asked for data of this type. If you realize that you are the victim of an attack you can report everything to malware@cert-agid.gov.it.
AGID | The fake scam message with the fake INPS message
