Fake invoices, receipts and bank statements by email

01A typical message

Example for illustration; real messages vary.

02Warning signs

• An unexpected invoice, receipt or statement, often from a company you do not use.
• A ZIP, RAR, HTML, ISO or IMG attachment, or a name like “dekont.pdf.exe” that hides a program.
• An Office file that asks you to “Enable content” or “Enable macros”.
• The sender address does not match the company in the message.

03What to do

• Do not open the attachment. Upload it to the MyScanner file scanner first: it checks it with an antivirus engine and looks inside without running it.
• Never click “Enable content” on a document from email.
• If it is about real money, check in your bank’s app instead of the attachment.

04Already clicked or replied?

1. Stop: do not enter anything else on that page and close it.
2. If you typed a password, change it now on the real site or app, and turn on two-step verification.
3. If you entered card details or approved a payment, call your bank on the number on your card and block the card.
4. If you installed an app from a link, delete it and scan your phone with a trusted security app.
5. Report it: forward scam SMS and links to your operator, and to your bank if it used their name.