UETS and e-Devlet phishing scams target citizens with fake legal notices

Cybersecurity experts and PTT have issued urgent warnings regarding a sophisticated phishing scam targeting Turkish citizens. Fraudsters are impersonating the National Electronic Notification System (UETS) by using fake emails that mimic official legal or notary notifications to exploit fear and panic.

Digital forensics expert Prof. Dr. Ali Murat Kırık warns that these emails contain links to counterfeit e-Devlet login pages that are visually nearly identical to the real ones. Once users enter their identity numbers and passwords, their sensitive data—including banking and contact information—is captured by attackers. Additionally, some emails include malicious Excel files containing Trojan horse (RAT) software, which allows criminals to seize control of computers, tablets, and smartphones to demand ransom in cryptocurrency.

PTT has clarified that it never requests passwords, verification codes, or bank details via SMS or email. Authorities advise citizens to verify all electronic notifications exclusively through the official UETS portal, the UETS mobile application, or the e-Devlet gateway, and to strictly check that official email addresses end in the 'gov.tr' domain.