This novel fraud scheme is marked by meticulous preparation and attention to detail. Perpetrators acquire authentic contact numbers for homeowner association (HOA) boards and residents. They then create convincing duplicate social media accounts, making them nearly indistinguishable from legitimate ones. Through ongoing communication, they send victims a verification code, which they then instruct the victims to relay back to them.
Fraudsters are now masquerading as leaders of homeowner associations (HOAs), garden partnerships (SNTs), and management companies. Residents have reported this new deceptive tactic. For instance, Alexey from St. Petersburg detailed his experience, after which many similar stories emerged from other individuals.
According to victims, this scam is meticulously planned and executed. Perpetrators gather information about specific HOAs and their management, including residents` phone numbers. They then expertly clone the HOA head`s social media account, replicating the avatar, photos, and other details to make it appear authentic. They send messages to residents, inquiring about changes in registered occupants or other seemingly routine matters. Alexey from St. Petersburg describes what happens next:
Alexey, St. Petersburg Resident: “Then, the supposed chairperson states in the same chat: `Excellent, a verification code for the Housing and Utilities State Information System will arrive shortly, please send it to me here.` What exactly this code is for, one can only guess, but it sounds incredibly plausible. Within a couple of minutes, a six-digit code arrives from another social media account, explicitly named `GIS ZhKKh`. What it`s for, remains a mystery. I dismissed the entire exchange because I am on the HOA board and know how we communicate with our chairperson; such a formal tone from her would be highly unusual. This made me suspicious, so I contacted her directly. She confirmed her actual account was untouched, and this was a duplicate, cleverly designed so that no names or phone numbers were visible.”
Similarly, an account belonging to Vladimir, the head of a garden partnership in New Moscow, was duplicated rather than stolen.
Vladimir, SNT Head, New Moscow: “Those who are savvy check for a phone number. But others, less careful, might just think, `Oh, we know this person, they`re asking for something.` Essentially, my account wasn`t hacked; it was duplicated. If you think critically, you can figure it out. But they send messages to hundreds, even thousands, hoping twenty might fall for it, and one will be successfully scammed. For them, that`s a day well spent.”
The Psychological Core of the Scam
A crucial question arises: when do the scammers move to their main objective? Everyone knows not to share codes sent by official government services. However, in this scheme, the fraudsters themselves send the code. What happens if you provide them with these self-generated numbers? It`s not about technology; it`s pure psychology, as explained by Vlad, who recently prevented his grandmother from falling victim to this deception:
Vlad, Resident: “Their scheme relies on inducing stress. First, they message from a fake housing authority representative, then a fake account sends a code. If you provide it, the same scammer then declares, `I`m a fraudster, I`ll hack your government services account, your bank, and steal all your money.` After this, a third fake account, supposedly `Government Services Support,` messages you with a number to call. That`s when the real, elaborate scam begins.”
Be prepared for these criminals to execute this multi-layered scheme over an extended period, warns cybersecurity expert Sergey Golovanov.
Sergey Golovanov, Cybersecurity Expert: “After some time, perhaps the next day, another person will call and ask for that very code you received. Interestingly, the fraudsters will call very frequently – after all, they sent it, and they need to retrieve it. Calls will keep coming for several days, and you must not respond to them.”
It is crucial to remember that you should never disclose any codes to anyone. Furthermore, understand that neither the Housing and Utilities State Information System nor any other state-affiliated entity will ever send codes or communicate via social media platforms like Telegram or WhatsApp; such actions are prohibited by law for these organizations.
An Unyielding Persistence
Undeterred, these fraudsters persist. Another individual shared screenshots of a similar exchange with a fake HOA chairperson. In this instance, the scammers made a comical error, mistaking the city, much like in the film “The Irony of Fate.” However, upon realizing their mistake, the resourceful criminals continued the conversation, claiming the recipient needed to be removed from the resident list since they were in St. Petersburg, not Moscow. To do this, a code was required. The ironic twist was that even after the scam was exposed and the dialogue ceased, the final message read: “Your HOA membership has been terminated. To exit the registry: 3314.”
Rupert Blackwood 
Clement Ashworth