Combating financial crimes with Expertise, Integrity and Collaboration
🌐Online scam
What is Online Scam?
Criminals are experts at using technology to commit fraud. They can spend hours researching you and will use any information found in their schemes. They may use phishing emails, cloned websites, and fake social media profiles or dating app profiles to gather your information. They can then use it to:
Contact you and gain your trust, then convince you to make a payment or provide access to your accounts;
Open accounts or take out loans in your name;
Gain direct access to your accounts to steal money.
Be Careful What You Share Online
Check your online privacy settings and review what information is currently available on the web.
Be careful what personal information you share on social media, forums, or dating apps. Criminals can use any information found online in their schemes.
These are just a few examples of information criminals could use: full name, date of birth, home address, email address, phone number, card details and bank account numbers, recent transaction details, or sensitive documents like utility bills. Even things like your first pet's name or the street you first lived on, as these can be security questions for your accounts.
Use the Internet Safely
Avoid clicking on links in emails or messages. Criminals can use them to capture your information. Always visit the organization's website directly from your browser.
Be cautious when opening ads on websites and social media. Criminals create convincing ads leading to fake websites to capture your information or urge you to make a purchase.
Criminals can create fake websites or clone legitimate organizations' sites. Check the site address carefully.
Look for the "padlock" symbol and/or https at the beginning of the site address — "s" stands for "secure". This does not guarantee the site is legitimate, but it means your connection is encrypted.
Stay vigilant with online contacts. Criminals create fake profiles to contact you on social media, apps, or forums — they may try to build a relationship with you or offer an exclusive investment.
Keep Your Accounts Secure
Use strong, unique passwords for your online accounts.
Enable two-factor authentication (2FA) to add an extra layer of security for accounts containing personal or financial information.
Use antivirus software on your devices and keep applications and software updated.
Do not use public Wi-Fi to access accounts with personal or financial information.
Examples
Real Case: Large-scale AI phishing scam — GDBOP (General Directorate for Combating Organized Crime) and the Sofia Regional Prosecutor's Office uncovered a large-scale phishing scheme where victims were prompted to enter their bank card details and SMS confirmation codes. Criminals used artificial intelligence and hacking platforms to automatically generate messages on behalf of institutions and courier companies. The obtained funds were used to buy gold, expensive electronics, cryptocurrencies, and top up online casino wallets.
Quick Tip: Never enter SMS confirmation codes via a link received from an unknown institution.
Real Case: Fake messages for unpaid traffic fines — The Ministry of Interior warned of a phishing campaign distributing fake SMS messages for unpaid toll fees, leading to a website resembling the official portal, where personal and banking details were requested.
Quick Tip: Check electronic tickets and fees only through the official channels of the respective institution.
CONTACTS
membership@baafce.bg
Copyright © 2025 Bulgarian Association of Anti-Financial Crime Experts - All rights reserved.
