In recent weeks, a significant vishing scam has emerged, targeting Ukrainians and Russians living in Portugal through fraudulent phone calls. Vishing, short for voice phishing, is a technique where scammers use phone calls to extract sensitive information from unsuspecting victims, such as bank details. The severity of this scam even led the Association of Ukrainians in Portugal to file a formal complaint with the National Data Protection Commission (CNPD).
The Scam’s Modus Operandi
According to Pavlo Sadokha, president of the Association of Ukrainians in Portugal, many immigrants have received calls from individuals pretending to be officials from various authorities. Posing as PJ Judicial Police officers, bank employees, or public prosecutors, these impostors have a grasp of fluent Russian and know their targets’ names and surnames, making the deception more believable. Sadokha himself was approached by a person claiming to be a PJ inspector, prompting him to become cautious and hang up immediately.
Community-Wide Impact
Following the initial scam attempt experienced by Sadokha, other community members began sharing similar encounters on social media. This exchange revealed a broader pattern, confirming that the calls were systematically targeting individuals of Ukrainian and Russian origin. The scammers consistently focused on extracting banking information without delving into any political issues. The association believes that a substantial data breach, providing crucial pieces of personal information such as mobile numbers and names, facilitated these attacks.
Suspected Data Breach
The compromised data used by the scammers does not appear to originate from the association’s database, leading to suspicions that the breach came from common social media platforms frequented by the immigrant communities in Portugal. While there are no confirmed victims who have fallen for the scam, the method’s similarity to previous scams and the meticulous execution have alarmed many. Consequently, numerous victims have filed individual complaints with the police, which motivated the association to escalate the matter to the CNPD.
Official Responses
Sadokha indicated a possible breach of Ukrainian nationals’ data but did not specify the source. He stressed the need for individuals to remain vigilant, especially when being contacted by strangers asking for sensitive information. Some of those contacted reported being threatened when they refused to provide their details, underscoring the need for caution and verifying identities when receiving such calls.
Previously, in the summer of 2023, the PJ encountered a similar scam conducted in English. They advised the public to avoid giving out personal information and to report any suspicious calls to the authorities. The National Cybersecurity Commission (CNCS) also provided recommendations endorsing caution. They urged people to avoid clicking on unfamiliar links or attachments and to diligently protect personal data.
Urgent Need for Enhanced Data Protection
In recent weeks, a widespread vishing scam has surfaced, specifically targeting Ukrainians and Russians residing in Portugal through deceptive phone calls. Vishing, which stands for voice phishing, is a fraudulent tactic where con artists use phone calls to steal confidential information from unsuspecting victims, like bank account numbers or personal identification facts. This scam’s severity was so impactful that it compelled the Association of Ukrainians in Portugal to lodge a formal complaint with the National Data Protection Commission (CNPD), highlighting the pressing need for vigilance and action against such fraudulent activities. The association emphasized the importance of protecting both Ukrainian and Russian communities from becoming victims of these malicious schemes. This situation illustrates the urgent need for increased awareness and precautionary measures to combat vishing and safeguard personal information. The CNPD is expected to take this issue seriously as it represents a significant concern for the expat community in Portugal, striving to ensure safety from these rising threats.