[CLSTR]
< Back to situation

[REVISION HISTORY]

Phishing scams targeting Balkan and Eastern European users

Updated 2 times since CLSTR started tracking revisions of this situation.

What changed

2026-09-09 17:07 UTC → 2026-09-09 18:33 UTC · added removed

Authorities and cybersecurity experts have identified various phishing scams targeting users in the Balkans and surrounding regions. In Albania and North Macedonia, police issued warnings regarding a surge in SMS and WhatsApp-based scams. Fraudsters impersonate bank representatives to trick individuals into clicking suspicious links to steal e-banking credentials, one-time passwords, and card details for unauthorized transactions. In Croatia, a specific WhatsApp scam has been identified that utilizes ‘social engineering’ to exploit emotional triggers. These messages urge recipients to vote for a person named Nikolina to help her win a scholarship. Experts note that attackers may obtain contact information through data breaches on social media or booking platforms to facilitate these attacks, which aim to hijack accounts or steal personal data. Recent reports indicate an expansion of these tactics into Romania and Moldova. In Romania, Bitdefender reported that over one million people were targeted in a single March 2026 campaign involving fraudulent SMS or WhatsApp messages. These scams impersonate courier companies by claiming delivery issues or requesting additional fees to trick victims into clicking malicious links. In response, Romania’s National Cyber Security Directorate (DNSC) and FAN Courier launched the ‘Exercițiul anti-repezeală’ awareness campaign. Additionally, ANCOM has issued warnings regarding the use In Moldova, authorities have reported a significant wave of time pressure telephone scams. In one instance, a 21-year-old woman in Bălți lost nearly 300,000 lei after fraudsters, posing as representatives of telecommunications companies and security services, convinced her to coerce users into accessing fake websites designed take out loans to mimic legitimate courier domains. ‘secure’ her funds. This was part of a series of scams in a 24-hour period that resulted in total losses exceeding 554,000 lei.

Versions

  1. 2026-09-09 18:33 UTC Phishing scams targeting Balkan and Eastern European users
  2. 2026-09-09 17:07 UTC Phishing scams targeting Balkan and Eastern European users
  3. 2026-09-02 14:59 UTC Phishing scams targeting Balkan users

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.