A New Wave of Cybercrime: Ministry of Interior, Banks, and Institutions are Targets of Scammers

Fake fines in the name of the Traffic Police

The Ministry of Interior (MoI) warns of frequent reports of fraud where criminals impersonate the Traffic Police. Victims receive messages via email, SMS, or Viber, often from foreign numbers with codes +63 and +44. The messages claim there are unpaid fines on slips or acts, threatening the recipient with sanctions if payment is not made.

Scammers use links to fake websites that visually mimic the Ministry of Interior's Portal for Electronic Administrative Services. The goal is to acquire personal and banking data or to install malicious software. The MoI emphasizes that the department does not send such messages from foreign numbers. A check for obligations can only be performed through the official portal: e-uslugi.mvr.bg.

Impersonation of Revolut employees

The General Directorate for Combating Organized Crime (GDBOP) reports financial scams where individuals impersonate employees of the Revolut platform. They attempt to drain accounts through phone calls (often from numbers with the +92 code) or fake emails.

Two main scenarios are used: "urgent currency conversion" of funds due to the transition to the Euro, or "fake profile updates" via links to mimicking websites. GDBOP reminds that Revolut employees never ask for passwords, PIN codes, or one-time access codes over the phone or in chat. If in doubt, citizens should end the conversation and contact them directly through the official app.

Scams using the name of the General Labour Inspectorate and banks

The General Labour Inspectorate (GLI) has also become the object of mass fraud through the distribution of electronic messages using the institution's name unlawfully. The GLI advises citizens not to open suspicious emails and attachments, reminding them that the Agency's official addresses end with the domain @gli.government.bg.

In parallel, mass attempts at fraud via emails mimicking large banking institutions continue, aiming to extract sensitive information through fake links.