Special powers: a trusted person will appear at Gosuslugi
On Friday, May 30, it became known about the intention of the Ministry of Finance to introduce on the Gosuslug portal the possibility of additional confirmation of password change. This feature will be available to a trusted user. For more information about when the project will be implemented, as well as the reasons for its introduction, see the Izvestia article.
Authorized representative at Gosuslugi: when will he appear, what is necessary for
As it became known on May 30, in the third quarter of 2025, the Ministry of Finance plans to implement the possibility for additional password confirmation on the Gosuslug portal. Access to the option will be granted to a trusted user, provided that each participant has an account on the portal. Any person chosen by the user can become a trusted person.
The head of the ministry, Maksut Shadaev, told reporters about the new function. According to him, the goal of the project is to provide additional protection against fraudsters.
"Now, for example, a fraudster lures out an SMS with a code, the person reports this code, and the fraudster changes the user's password on Gosuslugi. After the introduction of the second factor in the form of a trusted person, the fraudster will not be able to do this. Even if he received the code, there is a second factor in the form of a trusted person who will receive a notification to Gosuslugi about an attempt to change the password, the trusted person will have to confirm this action," the minister explained.
Enabling the service to add a trusted person will be voluntary.
Fraud schemes involving "Public Services"
The new feature, which may start working this year, is aimed at protecting users from hacking their account on Gosuslugi, which happens very often. According to Igor Krasnov, the Prosecutor General of the Russian Federation, 50,000 cases of illegal access to personal accounts were registered in 2024.
Fraud schemes aimed at hacking "Public Services" are constantly appearing. They are often tied to certain events in people's lives. Among the latest and most popular are:
— reissue of the phone number. Usually, they use the number that a person has not used for a long time and which has been released for re-sale. In this case, the number is registered to a new user, who changes the password on the portal by entering a one-time SMS code. However, access to the application is not blocked.;
— the call is supposedly from a telecom operator. In this case, the scammers offer to extend the number service agreement and ask you to name the SMS code that is actually needed to gain access to your personal account at Gosuslugi. Recently, scammers have been using the word "numbers" instead of the word "code" to confuse people.;
— medical record. The attackers make a phone call, pretending to be employees of polyclinics and say that it is necessary to replace the paper medical card with an electronic one. Otherwise, the card will allegedly be cancelled soon. To do this, again, you need to name the number from the SMS, as well as provide the SNILS number.;
— graduation parties. On the eve of the end of the school year, fraudsters also came up with a scheme to deceive parents of schoolchildren under the guise of participating in surveys. Hackers send messages ostensibly on behalf of representatives of the school or the parent committee, which contain a link to a website for participating in the survey (about events, school meals and extracurricular activities). In order to leave a voice, parents are asked to log in through a personal account. At this point, scammers gain access to their personal data.
What to do if your account on Gosuslugi has been hacked
If a person has become a victim of a fraud, a number of actions must be taken immediately. To restore control over your account, it is best to contact the MFC. It is also important to check whether the current phone number and e-mail are indicated in the personal account due to the fact that fraudsters could change them. Also, in the "Security" section, you need to end active sessions on other devices, leaving only the current one.
It is also important to check the notification feed and the "My statements" section.
You also need to submit a statement about the fact of illegal actions to the nearest police station or through the online reception on the official website of the Ministry of Internal Affairs of Russia. The application must describe in detail the contact with the fraudster and whether suspicious notifications or requests have been received. You can attach screenshots as proof.
Переведено сервисом «Яндекс Переводчик»
