CERT-AGID Warns of Fake Traffic-Fine Texts Impersonating Italy’s State Police
Summary
CERT-AGID warns of texts demanding an urgent €17 traffic-fine payment via poliziadistato[.]info, threatening a larger penalty. The campaign may steal personal and payment data; CERT-AGID requested domain deactivation and shared IoCs.
Key points
- The smishing text claims a reduced €17 fine for the GRA is due that day and threatens a €291 penalty and loss of driving-license points.
- The message links to hxxps://poliziadistato[.]info/it, which is not the State Police’s official domain.
- The site may imitate an institutional service to solicit personal information and payment-card data.
- The campaign uses urgency, fear of penalties, a small initial payment, and institutional impersonation to pressure recipients.
- CERT-AGID requested deactivation of the domains hosting the phishing pages and distributed campaign IoCs to accredited organizations.
- CERT-AGID advises not to click the link or enter information, and to verify any fine through official channels reached independently.
- Anyone who entered payment-card details should contact their bank through official channels; suspicious messages can be forwarded to malware@cert-agid.gov.it.
Article Details
- Event Type
- Smishing campaign impersonating the Polizia di Stato with a fraudulent traffic-fine payment link.
- Impact
- The message pressures recipients to pay €17 urgently by threatening a larger fine and loss of driving-license points. The linked fraudulent page could solicit personal and payment information; the article does not report confirmed victims or losses.
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | poliziadistato[.]info | Domain identified as hosting fraudulent pages for the smishing campaign impersonating the Polizia di Stato. |
| URL | hxxps[:]//poliziadistato[.]info/it | Phishing URL sent by SMS to impersonate the Polizia di Stato and solicit payment and personal or payment information. |