Smishing Attack in the Name of the BMF: How to Recognize the Fake Messages
The Federal Ministry of Finance (BMF) warns of a new wave of fraudulent messages currently being spread in the name of Austrian tax authorities via SMS and WhatsApp. Criminals pose as FinanzOnline or other official bodies and attempt to obtain sensitive data with fake messages. Security authorities speak of a sophisticated form of so-called "smishing" – phishing via short message services.
Fake Messages with Alleged ID Expiration Warning
According to the BMF, the perpetrators claim in the fake messages, among other things, that the FinanzOnline ID is expiring and needs to be renewed. The included links lead to deceptively real-looking but fake websites, where personal data such as passwords, credit card details, or bank account information are requested.
The BMF emphasizes that it never requests the entry of sensitive data via SMS, WhatsApp, or Messenger. Official communications are made exclusively by mail or through the Databox in the FinanzOnline system.
Warning of Further Fraud Schemes
In addition to ID expiration warnings, internet fraudsters also use other scenarios, including:
- angebliche Steuerrückzahlungen oder Rückerstattungen
- offene Forderungen oder drohende Pfändungen
- Warnungen vor verdächtigen Anmeldeversuchen
- Aufforderungen zur Aktualisierung von Daten oder zur Eingabe von Krypto-Vermögenswerten
The Ministry of Finance calls for increased vigilance and provides the following recommendations:
- Nicht auf Links oder Dateien in der Nachricht klicken
- Keine persönlichen Daten eingeben – insbesondere keine Passwörter oder Kontodaten
- Nachricht sofort löschen
- Im Zweifel das BMF oder die Polizei kontaktieren
Professional Deception with Real Logos and Senders
The fraudsters are increasingly acting professionally: The messages use official logos, real sender names, or imitate the writing style of authorities. They pose as the BMF, the Austrian Tax Office, the Customs Office, or directly as FinanzOnline.
The BMF strongly warns: If you have doubts about a message, you should inform yourself directly through official channels and under no circumstances respond.
(Red)
This article has been automatically translated, read the original article here.