Scam – I thought it couldn’t happen to me

Hi! I write to share a bitter lesson from yesterday. I always thought I was smarter and I couldn’t get a phone scam. I wondered how people could catch up. Here is the saying – a big bite of paw, a big word don’t say – it applies with full force.

He called me an unknown person, posing as a police officer working in the cybersecurity department. Very quickly, he began to fire me with information: a person with two fictional and unknown names had a power of attorney, notarized and signed by me and tried to withdraw a loan at a DSK bank branch in Sofia. He started asking me if I knew where the information could have leaked. He told me to think logically and that only my bank has the information that is needed for such a power of attorney. Abe in a word – turned me around.

At first he asked questions, the answers to which, did not carry any personal information that could be used maliciously. I answered. He then explained to me how, according to GPDR, he cannot require personal information by phone and I will give all personal information after my summons arrive and on the spot in the district. But in order to act in a timely manner, because the lady could with this power of attorney with money from any institutions (fast loans, banks), it was necessary to give some information over the phone. At that moment I wanted to be legitimized. The person sent an email, at first glance from the MoI email. I saw the email while we were talking, but I was still not completely convinced.

Finally, he wanted me to dictate his three names and my date of birth so that he could link me to the BNB, which would offer me an option to insure my bank account. Here, my light was bright and I asked him if I could talk to his leader/chief before. He replied "Yes of course" And after 10 seconds, he started talking again, but with a changed voice (probably with some software). However, the pronunciation remained the same, unlike the voice. I closed. After closing, I bombed me with 16-17 calls within seconds. Each of a different number. It is already clear here that it was a fraud and I even got to get it I didn’t think of earlier. It turned out that the email he was allegedly legitimized with is "spoofing email"which is a masked email address using Header. The Header writes the Interior Ministry’s email, but in fact the real email address remains hidden.

I have taken security measures (password replacement, fund transfer and report to the police). For the moment, I think I’m safe. I can give many excuses – I was at work, I thought my things, called the right moment for the success of the fraud. The important thing is that I was in the hair to believe in a skillful lie, which could have caused me a lot of headaches and problems. I share so that it does not happen to someone else. Be an imaginary fully and do not give any information on the phone.

In the photos you see the masked e -mail of the fraudster – the real is [me559891@web709.default-host.net](mailto:me559891@web709.default-host.net)

Comes from web709.default-host.net (IP 185.234.176.229), somewhere in Kyiv, Ukraine. I guess spent vpn, so hardly a real location.

Phone we talked to: +359893695728

The phones I called when I felt it was a scam and I closed: +359884757372 +359851776666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666666) +359888192922 +359897811057