Cybersecurity experts have uncovered a new fraudulent scheme targeting citizens in Uzbekistan, Belarus, and Tajikistan, exploiting trust in state social initiatives. Scammers promise government payments, ask victims to fill out a simple form, and then call posing as a “personal manager.” The findings were reported by the Digital Risk Protection department of F6.
Researchers identified over 360 fraudulent domains linked to this campaign. The websites mimic official information resources or regional news outlets, publishing materials about an alleged state financial support program. Users are asked to complete a short survey, after which a payment is promised. For instance, residents of Uzbekistan are promised 15 million soums weekly. To “register,” one only needs to provide their full name and phone number.
Two main types of sites are used. The first is a simple one-page resource describing the “program” with a form. The second fully copies the appearance of a regional media outlet and publishes a fake “journalistic article” about a social initiative, with a data collection form at the end. Once a person leaves their phone number and other details, a scammer contacts them, introduces themselves as a personal manager, and continues the conversation via phone or internet.
The goal can vary. In one case, the victim is persuaded to pay a “commission” or “fee” for processing the payment. In another, scammers try to gain access to the device or personal data. A particularly dangerous variant involves offering to install an app for “system registration” or “identity confirmation.” In reality, this could be malware that takes control of the smartphone and allows criminals to withdraw money from the victim’s accounts. Another risk involves documents. Under the pretext of identity verification, scammers may ask for a passport scan. With such data, criminals can later use it—for example, to take out loans or conduct new phishing attacks.
F6 experts recommend verifying any information about state payments only through official government websites. It is also advisable to carefully check the website address and, if necessary, verify the domain using WHOIS services. According to experts, fraudulent resources are often registered just days or weeks before the scheme launches. Do not follow links from strangers. Even if a message comes from an acquaintance but you did not request the link, it is better not to open it: the sender’s account may be hacked. Never share bank card details, passwords, SMS codes, or other financial information with anyone. Do not enter such data on unfamiliar websites either. The main rule is never transfer money to strangers. If an offer seems suspicious or the situation is unclear, experts advise pausing and discussing it with someone you trust.
Earlier, users in Uzbekistan began receiving links to alleged online voting for “best grandfather,” “best grandmother,” “best dad,” or “best mom.” By clicking such a link and entering a Telegram code, a person may lose access to their account, after which scammers start asking for money from their contacts.
Source: podrobno.uz