It looks like a legitimate traffic with a QR code. But behind there is a false and cybercriminal page

At first glance, it seems one more traffic fine: official paper, DGT logo and a message that invites you to pay as soon as possible. But it is a trap. Actually, it is a fraudulent impression that is appearing in car windshield in Malaga and that seeks to supplant the General Directorate of Traffic to steal bank data.

The Local Police and the City of Malaga have already launched a public warning after detecting the first cases this week. As explainedthe document uses both the shield of the Ministry of Interior and the DGT logo to appear authenticity. Its objective: to make unexpected drivers with false sanctions.

A scam to steal bank card data

The mechanism is direct. The supposed fine incorporates a QR code That, when scanning with the mobile, redirects to a website that mimics a digital DGT environment. There the user is asked to enter the data of their bank card. Everything is designed to seem legitimate, even a “support chat” headed with the institutional image of traffic.

This is how fines that have appeared in Malaga are seen in recent days

The objective is evident: to capture the data of the credit or debit card of those who fall into the trap.

The fraudulent website: Thus try to steal your data with the DGT appearance

However, deception is not perfect. Some details betray falsification: the header says “boss” instead of “headquarters” and “apartadp” instead of “section.” Also Key elements of an authentic fine are missingsuch as the agent number, the vehicle data or the place where the infraction was supposedly committed.

Even so, the risk is real. In the middle of the daily routine, and given the pressure to solve the matter as soon as possible, it is not difficult for someone to scan the code and enter their data without thinking too much.

Scams through QR codes are not new. In fact, they have their own name: Qrishing. The National Institute of Cybersecurity (INCIBE) and other organisms have not been warning of this type of fraud. What is new is this campaign located in Malaga, which It could extend Easily to other cities if scammers replicate the pattern with slight adjustments.

An image of an authentic fine, with all official elements

The City Council has made available to citizens the phones 951 926 010 and 010 to consult doubts or verify whether a fine is real. The aspect of an authentic sanction has also been shared to help differentiate it from falsification.

Who is behind? At the moment, there is no official information. What we do know is that the fraudulent website is still operational. The domain used, dgtmultamalaga.sbsis lodged under the umbrella Webnica low Asian cost registrar, which makes it difficult to track the person in charge or know if the registration data has also been supplanted.

Images | Local Police of Malaga and Malaga City Council | Screen capture (xataka)

In Xataka | Our password managers serve much more than passwords. So you can get the most out of them