THE INCIBE, National Institute of Cybersecurity, has issued a warning about a fake replica of the Hacienda website that tricks Internet users into sending their bank details for a ‘tax return’.
The fraudsters behind the scam ask people to give them their personal data that is then used to transfer money to themselves or to carry out online purchases.
Victims have reportedly received an email from the Hacienda ‘Tax Agency’ including a message informing the user that they are entitled to a ‘tax return’.
The scam email provides a link to ‘claim the tax money’, redirecting the victims to a website containing an application form where the individual is asked to provide their personal information, such as the bank card number, expiry date and CVV code.
Once the user has filled out the form, the website redirects to a Russian domain where the ‘request is processed’.
Soon after, a new window appears notifying the victim that they will shortly receive an SMS with a code, but it never arrives as the user has at no point been asked for a mobile phone number.
This online scam is method known as ‘phishing’, where the fraudster pretends to be a trusted institution or individual with the goal of stealing private data from different victims.
The National Institute of Cybersecurity suggests that victims of the scam contact their bank to prevent hackers from using their bank information any further.
And any potential victims are advised to look for the term ‘freshdeck.com’ if they receive a message to avoid being conned, as the sender email address is reportedly similar to that of the official state agency.