Listen to the episode
TLDR
CSIRT Italia has detected an smishing campaign that exploits the name of SEND – Servizio Notifiche Digitali and pagoPA to trick victims into paying alleged traffic fines. The SMS, apparently sent by a generic "Municipality" (Comune),...
How it works
CSIRT Italia has detected an smishing campaign that exploits the name of SEND – Servizio Notifiche Digitali and pagoPA to trick victims into paying alleged traffic fines. The SMS, apparently sent by a generic "Municipality" (Comune),...
Red flags
- Urgent pressure to click, pay, or share codes immediately.
- A link or sender that does not match the official organization.
- Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What to do
- 1The SMS, apparently sent by a generic "Municipality" (Comune), reports a dense list of violations of the Highway Code associated with the recipient's license plate and redirects to a very polished consultation page.
- 2Red flag: SMS from a fictitious "Municipality" with an external link to verify a fine never received via registered mail or PEC.
Source
csirt-italia
Source reviewed by Mythos Forensic Team
https://www.acn.gov.it/portale/w/campagna-di-phishing-a-tema-send-servizio-notifiche-digitali-FAQ
Is Phishing SMS themed SEND Servizio Notifiche Digitali: fake traffic fines with online payment a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What should I do first?
The SMS, apparently sent by a generic "Municipality" (Comune), reports a dense list of violations of the Highway Code associated with the recipient's license plate and redirects to a very polished consultation page.; Red flag: SMS from a fictitious "Municipality" with an external link to verify a fine never received via registered mail or PEC.
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.