Italy faces phishing scams impersonating PagoPA and INPS

Cybercriminals are targeting Italian citizens through sophisticated phishing campaigns impersonating official institutions. CERT-AgID has identified a specific scam involving fake TARI (waste tax) refunds. Attackers use fraudulent websites that closely mimic the PagoPA interface, using official logos and colors to deceive users. These sites claim an excess payment exists and prompt victims to enter personal details, including tax codes, identity card numbers, and credit card information, to claim a purported refund.

In addition to the TARI scam, reports from the Pisa region indicate a wave of fraudulent SMS and web portals impersonating the National Social Security Institute (INPS). These messages aim to steal personal data, identity documents, and payment information by claiming urgent data updates or refunds are required.

Authorities and organizations like CNA Pisa emphasize that official entities such as INPS do not send direct links via SMS or email to request sensitive data or financial details. Users are advised to verify communications through official channels rather than clicking links in suspicious messages.