Agenzia delle Entrate and Government Officials Targeted by New Phishing and WhatsApp Scams

Italy’s tax agency, Agenzia delle Entrate, has warned of a surge in phishing campaigns that use compromised certified email (PEC) accounts to send fake electronic invoices. The messages appear to come from official PEC addresses, contain compressed attachments with malicious code, and prompt recipients to download a “invoice” that leads to malware. The agency disavows all such communications and advises users not to open attachments, click links, or provide personal data.

In parallel, the government’s press office has reported a wave of WhatsApp scams that falsely attribute messages to Deputy Minister Alfredo Mantovano. The fraudulent messages urge Italian entrepreneurs to sign bogus confidentiality agreements or send money for fictitious government projects, and they aim to harvest signatures and financial information for further fraud. Both schemes exploit the perceived legitimacy of public institutions, prompting authorities to alert citizens and businesses to verify any unsolicited requests through official channels before responding.