Italy grapples with surge in cyber scams targeting email and crypto assets

Italian authorities report a sharp increase in cybercrime exploiting the country's certified email (PEC) system, with more than 650 incidents recorded by CERT‑AgID since early 2026 and a peak of over 60 events in late May. Criminals are compromising legitimate accounts and creating fraudulent PEC mailboxes to send phishing and malware‑laden messages.

At the same time, a new phishing campaign impersonating the Agenzia delle Entrate is luring users into falsified crypto‑asset declaration forms, aiming to steal wallet credentials and bank details. The fraud combines deceptive emails with vishing phone calls that pressure victims to provide sensitive information.

Businesses are responding by bolstering user education. IT SOLUTION has launched a Cyber Security Awareness programme to train employees in recognising phishing, managing passwords and securing remote work. Meanwhile, Italian executives are being reminded that cyber risk now falls under corporate governance, with the NIS2 directive and recent Clusit reports highlighting the personal liability of CEOs and boards for security failures.