[REVISION HISTORY]

Italy phishing, physical & SPID fraud – Aug/Oct 2026

Updated 21 times since CLSTR started tracking revisions of this situation.

What changed

2026-10-04 12:48 UTC → 2026-10-24 12:56 UTC · added ~~removed~~

The Italian crackdown on digital and physical fraud continued through ~~September~~ October 2026, characterized by increasingly sophisticated impersonation of state institutions and targeted attacks on vulnerable populations. A major phishing campaign has been identified targeting SPID users, where criminals demand a fictitious annual “SPID fee” via deceptive domains to harvest fiscal codes and credit card data. Scammers are also exploiting legal fears by impersonating the Ministry of the Interior, the Rome Tribunal, and the Polizia di Stato. The Polizia Postale has issued specific warnings regarding fraudulent emails that use official logos, headers, and the signatures of high-ranking ~~officials.~~ officials to claim recipients have viewed illegal content. In ~~early September, new digital~~ August, the Ministry of Health warned of fake “health payment rectification” emails, while INPS flagged AI-driven identity theft targeting pensioners in Sicily. Scammers have also used telephone impersonation of Carabinieri officers to target elderly residents in towns like Nerola and Laglio, attempting to trick them into handing over cash. Digital threats ~~emerged~~ involving WhatsApp and ~~SMS. Attackers are hijacking WhatsApp accounts or impersonating known contacts to request urgent financial assistance. Simultaneously,~~ SMS remain prevalent. CSIRT Italia ~~flagged SMS phishing~~ and Cert-Agid have identified campaigns mimicking municipal communications, ~~such as unpaid speeding fines, using the branding of services like SEND and pagoPA. CERT-AgID identified a specific scam involving fake~~ TARI ~~(waste tax) refunds, where fraudulent websites mimic the PagoPA interface to steal~~ waste tax ~~codes, identity card numbers,~~ refunds, and ~~credit card details.~~ PagoPA interfaces. By mid-to-late September, fraud tactics intensified through highly targeted impersonations. The Agenzia delle Entrate warned of sophisticated smishing and phishing campaigns using fake Irpef tax refund notifications. Additionally, Cert-Agid issued a warning regarding a scam targeting vehicle owners via messages claiming unpaid regional car taxes (bollo auto). In late September and ~~early~~ October, fraud targeting motorists ~~escalated. Authorities in Tuscany, including the Rosignano Marittimo Local Police, warned of~~ escalated through SMS ~~phishing using PagoPA branding that claims recipients have~~ scams impersonating EasyPark or claiming unpaid speeding ~~violations, offering a fake 30% discount for immediate payment~~ fines via PagoPA-branded messages. Additionally, new schemes impersonate the Centro Unico di Prenotazione (CUP) to ~~steal credit card data. In Modena, police reported a physical threat where~~ trick users into calling premium-rate numbers regarding medical appointments. Physical threats also persist, such as counterfeit parking notices ~~are~~ left on windshields ~~alleging illegal parking.~~ in Modena.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.