Sometimes you get a fine and you start to doubt, because you know for sure that you were going faster than you should have or that you definitely beat a radar that was placed in a section to catch you. But other times you hesitate because you always drive while respecting boundaries. “Why did they give me such a penalty in the SMS I just received?” No, they didn’t actually give it to you, they’re just trying to scam you.

OSI, which is the Internet User Security Office of INCIBE or the Spanish National Cyber ​​Security Institute. Warns of new attempt to steal bank data through fake fines. And this is how it works.

This beautiful SMS is wrong: It does not come from DGT

OSI tells us that A ‘smishing’ campaign consisting of fake messages aimed at impersonating the General Directorate of Traffic (DGT) is ongoing. In the messages in question ““The buyer is notified of an alleged traffic violation and is asked to resolve the issue as soon as possible using the link provided.”

By clicking on the attached URL in question, redirected to a website: “Your personal information and bank information will be extracted“ Here’s how the scam and its process works:.

1. you got An SMS from DGT They say they fined you and this is the last reminder.
2. If you enter the link, you will land on a site that looks like the legitimate DGT website because they offer you to pay online. Inside they tell you this You have less than 24 hours to pay or you will be subject to a 50% surcharge and even demands a crude social engineering trick to force you to do it.
3. After clicking “Pay the fine”, another screen will open showing the fine number. Different personal data is requested, all mandatory To continue the process.
4. You will be asked after filling out the form and clicking the “Continue” button. different credit card informationSuch as card number, expiration date or CVV.
5. When you continue, a message appears informing you that additional authentication is requested. After a few seconds the next step They ask you for the previously given code sent to your mobile phone via SMS. You will never receive this code.
6. Even if you use another code and the fake website invalidates it, you can still proceed with the checkout process. In the last step They ask you for the card password, Something they will NEVER ask you for online unless they want to scam you.
7. Once you give them the PIN, the next page of the website appears blank and that’s it. They have all your card details, including your PIN, and can use it online unless you invalidate it.

Website that appears to be DGT’s official site

Actual penalty notices from DGT

The DGT informs you on its website that there are two ways to notify you of the penalty “We send this to you by postal letter or we provide notice or make available available electronically Your Road is at Your Electronic Address“, the latter is a virtual mailbox that you can subscribe to. You can also see this in applications such as Citizen Folder.

DGT also points out that there are several ways to pay a fine:

• Via your web app
• by phone
• From MiDGT mobile app
• Personally At the ATM, bank, post office or Traffic agency

However In no case will they ask you for information such as your card PIN.a sign that the above is just a scam attempt.

via | OSI/DGT Website

In Xiaomi World | I think someone broke into my WhatsApp, five signs to tell