Imagine: you check your mail, and there is a letter from your medical insurance company (poistovňa - insurance institution). It talks about an alleged overpayment that you are supposed to get back. Everything looks very official: logo, name, even the tone of the message. The only thing you need to do is click the link and authorize the refund. Sounds attractive, right? But the Slovak police warn: this is a new wave of phishing attacks aimed at stealing your personal and banking data.
How the scammers' scheme works
Scammers send emails that imitate messages from medical insurance companies (poistovňa - insurance institution). These emails say that you are entitled to a refund for overpaid insurance contributions. To get this money, you are asked to click the link in the email and enter your data to “authorize” the refund.
However, this link leads not to the official website of the insurance company (poistovňa - insurance institution), but to a fake page. The purpose of this page is to make you enter your personal data, logins, passwords, or banking details. Once you do this, scammers get access to your confidential information and can use it to steal money or commit other crimes.
Such schemes, where scammers pretend to be trusted organizations, are among the most common. They often create artificial pressure to make the victim act thoughtlessly, for example, by indicating a “limited time” to receive the refund.
What to do to protect yourself
To avoid becoming a victim of scammers, follow these rules:
- Do not click on suspicious links. If you receive an email about an overpayment or any other financial operation from an insurance company (poistovňa - insurance institution) or another institution, never click on the link in that email.
- Verify information through official channels. Always check any suspicious messages directly with the institution that supposedly sent the email. Use official contact details (phone, website) that you know or found on the official site, not those given in the suspicious email.
- Pay attention to details. Notice the sender’s address, grammatical errors in the text, strange email design. Often scam emails have small differences that can indicate their falseness.
- Do not give in to pressure. Scammers often create a sense of urgency so you act quickly without checking information. Remember, no important financial operation requires immediate action without proper verification.
What to do if you already entered your data
If you already clicked the link and entered your personal or banking data on a suspicious site, act immediately:
- Contact your bank immediately. Report the situation and ask to block your cards or take other measures to protect your account.
- Report to the police. After contacting the bank, be sure to report the fraud to the police. You can visit the nearest station or call.
Remember that the Slovak police actively fight cybercrime, including phishing, which can be qualified as unauthorized access to a computer system or fraud. Your vigilance and quick reaction will help avoid financial losses and protect your data.
You can find more information about how to recognize and report fraud on the Europol page.
