A new fraudulent scheme with imaginary tax deductions has appeared in the Russian Federation

Fraudsters are complicating their social engineering algorithms in order to disorient victims, information security specialists told Izvestia. Now, instead of immediately demanding to pay for something or transfer money to "safe accounts," they offer a potential victim to get a clean bank card, explained the Solar AURA digital threat center of Solar, a Rostelecom company.

Don't let them take it: scammers use self-locking on loans to cheat

How do attackers get login information for Gosuslugi and how dangerous is it?

As an example, they cited one of the phishing sites discovered and studied there, offering to issue a tax deduction.

"To receive it, victims are offered to fill out an application and submit it allegedly to the Federal Tax Service. If you click on the registration button, the user is thrown to the site of one of the banks to order a separate bank card. Then social engineering comes into play, and the development of the event can be different depending on the goals of the attackers. For example, the victim may be asked to pay a commission for providing the service," noted in "Solar".

With the emergence of a self-imposed ban on the issuance of loans and microloans, fraudsters are forced to look for workarounds to steal money, said Timofei Voronin, deputy director of the Center of Competence NTI "Technologies for Storage and Analysis of Big Data" on the basis of Moscow State University. The vector of fraudulent attacks has shifted again to bank cards, but the mechanism of theft has been updated - now it is necessary to create a new card, he argues.

"Registration of an additional card is one of the elements of the fraudulent scheme, which is necessary to put your vigilance to sleep. This scheme of deception is calculated on the fact that inattentive people will agree to make a card to get a cacheback, tax deduction and so on", - points out Timofey Voronin.

Read more in the exclusive material "Izvestia":

Cards with a trick: fraudsters have come up with a scheme to cheat on tax deductions