Italy warns of rising SPID and digital payment scams

The Italian cybersecurity agency CERT‑AgID has alerted users to a wave of SPID‑related phishing emails that impersonate official bodies, claim urgent renewal issues and direct victims to fraudulent payment links. Successful attacks can expose personal data and grant fraudsters access to public‑administration services, banking and tax portals, effectively constituting identity theft.

A separate report from the Bank of Italy notes that, while card‑fraud incidents are declining, criminals are increasingly exploiting psychological manipulation in digital payments. Victims are tricked into initiating SEPA transfers to fraudsters via phishing, spoofing or fake phone calls, resulting in average losses of several thousand euros per incident. Authorities recommend the use of strong authentication, vigilance against unsolicited payment requests, and possible future EU directives on mandatory reimbursement for impersonation cases.