A new phishing scheme is gaining traction in Russia: cybercriminals are creating fake websites that mimic government portals for processing child subsidies and benefits. These fraudulent sites often reference ESIA (Unified Identification and Authentication System) and `Gosuslugi` (State Services portal) to appear legitimate.
On these deceptive websites, users are promised `state support` payments of 45,000 rubles. To receive the supposed payment, unsuspecting citizens are instructed to link their bank account via the Fast Payment System (FPS).
Upon scanning a QR code, an FPS portal opens, prompting the user to select their bank. The user is then redirected to their bank`s mobile application with a request to link an account. This method allows scammers to initiate unauthorized transfers of funds from the victim`s account to their own without further confirmation. Furthermore, the information obtained about the victim`s bank can be used to impersonate calls from that specific financial institution, send phishing messages, and even facilitate blackmail.
Previously, the Ministry of Internal Affairs warned about another scam: cybercriminals call Russians posing as fake district police officers. They inform victims about the alleged `identification of a group of scammers` and provide a number for `protection.` Subsequently, the fraudsters contact the victims again from different numbers, intimidating them and coercing them into transferring money.
Clement Ashworth 
Barnaby Whitfield