Phishing wave in Austria: Forged Asfinag emails demand vignette payment
Fraudsters are sending deceptively authentic emails in the name of Asfinag and threatening fines of up to €3,000. The goal is to steal credit card data.
Forged Asfinag emails lure motorists to phishing sites
According to weekend.at, Austria is currently experiencing a targeted email fraud scheme in the name of Asfinag. The messages are directed at motorists and are deceptively authentic in design – the logo, structure and tone imitate official communications from the company.
In terms of content, the senders claim that there is an outstanding claim for a missing vignette on motorways and expressways. Recipients are confronted with a penalty of up to €3,000 – the pressure is intended to prompt quick payment.
Ostensibly cheap solution as bait
At the same time, the fraudsters offer an apparently straightforward way out: for €12.36, a retroactive 10-day vignette is available to avoid proceedings. A button labelled "Pay replacement toll now" is at the centre of the email.
However, clicking this button does not take users to an official Asfinag website, but to a fraudulent website designed to capture personal information. The particular target is credit card information – subsequently, significantly higher amounts can be withdrawn without notice.
Identifying characteristics of the scheme
Despite the professional design, clear indicators of fraud can be identified. The sender address typically does not match an official Asfinag domain. The combination of payment threats and an immediate payment offer via link is also atypical for authorities and public enterprises. The unusually low amount of €12.36 also serves to build trust.
Asfinag has taken a clear position: "Please always check the sender address, do not click on or open any links and do not disclose any data."
Recommended procedure when receiving such emails
Anyone receiving such a message should under no circumstances click on any links contained within it and should not enter any personal or financial information. The email should be deleted immediately.
Whether there is actually an outstanding claim from Asfinag can only be verified through the company's official channels – not through links in emails. Asfinag does not generally collect payments via direct email links.
Source: Google News AT — Crime (de)