CERT-AGID Warns of Health Card Replacement Phishing Campaigns in Italy
Summary
CERT-AGID reports active campaigns impersonating Italy’s Ministry of Health to steal personal and payment data through fake health card replacement notices and staged forms. It requested domain takedowns and shared indicators with accredited entities.
Key points
- The campaigns use a fake 2026 mandatory health card replacement notice to create urgency and impersonate Italy’s Ministry of Health.
- Phishing sites mimic official portals with ministry branding, fake FAQs and fabricated protocol references.
- A staged funnel requests names, tax codes or identity-document details, phone numbers and, ultimately, full credit card details including CVV.
- CERT-AGID says health card renewal for eligible citizens is automatic and free; official procedures do not use email or SMS links requesting payment.
- CERT-AGID requested takedowns of malicious domains; registrars had acted in most cases, and indicators were shared with accredited entities.
Article Details
- Event Type
- Active phishing campaigns impersonating the Italian Ministry of Health to collect personal and payment data.
- Impact
- The campaigns target Italian citizens with a staged funnel requesting identity details and full credit card information. CERT-AGID requested takedowns of the malicious domains and shared indicators with accredited entities; the article does not provide specific domains or URLs.