TLDR
CSIRT Italia reports a smishing campaign (phishing via SMS) that exploits the ATAC S.p.A. brand, the public transport company of Rome. Users receive a message reporting a presumed irregularity related to the failure to validate the ticket,...
How it works
CSIRT Italia reports a smishing campaign (phishing via SMS) that exploits the ATAC S.p.A. brand, the public transport company of Rome. Users receive a message reporting a presumed irregularity related to the failure to validate the ticket,...
Red flags
- Unexpected SMS about failure to validate ticket: ATAC does not send SMS notifications for ticket irregularities
- Low amount (1.50 €): the small figure lowers the attention threshold and prompts immediate payment
- Threat of sanctions: intimidating language about debt collection procedures to force a reaction Actions:
- Do not click links in SMS received about presumed irregularities: ATAC communicates only through official channels
- Verify directly on atacroma.it or through the official app before any payment
What to do
- 1CSIRT Italia reports a smishing campaign (phishing via SMS) that exploits the ATAC S.p.A.
- 2Users receive a message reporting a presumed irregularity related to the failure to validate the ticket, with a request for payment of 1.50 euros.
- 3Verify directly on atacroma.it or through the official app before any payment 3.
Source
csirt-italia
Source reviewed by Mythos Forensic Team
https://www.acn.gov.it/portale/w/campagna-di-phishing-a-tema-atac-s.p.a.-FAQ
Is SMS phishing campaign on unpaid ATAC ticket a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Unexpected SMS about failure to validate ticket: ATAC does not send SMS notifications for ticket irregularities; Low amount (1.50 €): the small figure lowers the attention threshold and prompts immediate payment; Threat of sanctions: intimidating language about debt collection procedures to force a reaction Actions:
What should I do first?
CSIRT Italia reports a smishing campaign (phishing via SMS) that exploits the ATAC S.p.A.; Users receive a message reporting a presumed irregularity related to the failure to validate the ticket, with a request for payment of 1.50 euros.; Verify directly on atacroma.it or through the official app before any payment 3.
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.