IT expert Daniil Borislavsky reveals how fraudsters are now impersonating online psychological services to trick unsuspecting individuals into revealing personal information and financial details.
A new and alarming fraudulent scheme has begun circulating online, targeting Russian citizens. Cybercriminals are creating fake platforms that mimic legitimate psychological assistance services, according to Daniil Borislavsky, Product Director for Staffcop`s information security division “Kontur.Egida.” He detailed this dangerous development in a recent interview.
Borislavsky explained that these malicious actors disguise their operations as crisis hotlines or Telegram chats staffed by psychologists. They attract potential victims with enticing advertisements and messages promising free and accessible support, using slogans such as “Psychologist 24/7,” “Anonymous and without appointment,” or “Help for victims in crisis.” Upon entering these fake chats or websites, users are greeted by either an automated bot or a “consultant” who initiates conversation with seemingly empathetic questions like, “How are you feeling?” or “What`s bothering you?” This is the critical first step in their deception.
After a brief interaction, typically lasting 10-15 minutes, the victim is presented with a condition to continue the “session.” They are told, “To proceed, you must verify your identity or make a symbolic payment. This is a refundable deposit — 200 or 500 rubles,” the expert stated. Any card details entered at this point are immediately stolen by the fraudsters.
Borislavsky also identified a second common tactic: victims are asked to complete an “application form for specialist selection.” This form prompts for sensitive personal information such as their full name, phone number, and even workplace, all of which is then harvested by the criminals for illicit purposes.
A third, equally dangerous scenario involves users being instructed to “confirm your account to continue working with the bot.” This redirection leads them to a meticulously crafted fake page that perfectly imitates Telegram`s login interface. Entering a phone number and the corresponding SMS verification code into this fraudulent window results in the complete theft of the user`s messenger account, Borislavsky warned.
The primary method here is the exploitation of emotional vulnerability. When under stress, individuals tend to overlook crucial details like URLs or service licenses. Their sole focus is finding someone to listen. This makes the scheme even more sinister, as it preys directly on the hope of receiving much-needed support.
Borislavsky further elaborated on the success of these scams: “The market for telemedicine and psychological consultations has expanded dramatically; online sessions are now commonplace. During times of crisis, people often seek immediate help without thoroughly vetting their sources. Furthermore, these scammers capitalize on the growing awareness and importance of mental health – a topical issue that inherently increases trust in such services.”
By collecting data through fake questionnaires and payment attempts, fraudsters systematically build a comprehensive digital profile of their victims. This profile, Borislavsky noted, can subsequently be exploited for blackmail, to obtain fraudulent microloans, or to launch highly targeted cyberattacks. In some instances, the ultimate prize for the criminals is even more valuable: full access to a victim`s Telegram account, which contains private correspondence, contact lists, and critical data that can be used for further sophisticated attacks, he added.
The expert predicts that this particular scam methodology is likely to continue evolving and becoming more sophisticated. While currently primarily involving deceptive chats and websites, Borislavsky anticipates the imminent emergence of deepfake online psychologists. These advanced scams would feature an AI, complete with the simulated face and voice of a recognized expert, conducting a therapeutic session before ultimately asking the user to “confirm a card” for fraudulent purposes.
This warning follows earlier alerts from Borislavsky regarding phishing campaigns that impersonated schools. Parents were receiving SMS messages or emails falsely requesting payment for school supplies, after-school activities, or child transportation, frequently embedding malicious links or QR codes.
Clement Ashworth 
Barnaby Whitfield