In Kazakhstan, the number of cases of online fraud continues to grow – attackers are increasingly using both psychological techniques and vulnerabilities of digital services. Adapting to the growing digital literacy of users, they are finding more sophisticated ways to access personal data and money.

Fake summonses from “military enlistment offices” and fake letters from Google

One of the new schemes is fake summonses allegedly from military enlistment offices. The victims receive SMS and threatening messages in messengers: “You are evading service,” “Confirm the details to avoid a fine.” Links in such messages lead to phishing sites where the user’s passport and bank details are stolen.

Another scenario is fake emails from Google. Due to the vulnerability, attackers forward legitimate emails from no-reply@google.com by changing their contents. Inside there are fake links leading to websites disguised as Google Docs or Google Sites. Such attacks are especially dangerous: the email looks real, and the phishing is invisible.

New trick: screen demonstration in messengers

Realizing that people have become more careful and no longer voice SMS codes, scammers resort to a new trick: they ask to turn on the screen demonstration under the guise of assistance with public services or payments. While the person is showing the screen, the attackers initiate actions that require confirmation, such as transferring money or resetting a password. The confirmation code appears on the screen and instantly falls into the hands of the fraudster — without a single word.

Fraud is increasingly taking digital forms. Be careful: even if the message looks official or comes from a “real” address, this is not a guarantee of its authenticity. Do not click on suspicious links, do not share SMS codes, and never turn on the “demo screen” on your phone while talking to strangers.