Even temporary loss of access to "Gosuslugi" can lead to serious problems. Attackers can obtain electronic copies of your documents and use them for fraud in the future, said Alexandra Pozharskaya, an expert of the People's Front project "For the Rights of Borrowers" and the "Moshelovka" platform.
Fraudsters have come up with a new way to deceive Russians. They call people, posing as employees of well-known security system installation companies. The attackers offer a free replacement of intercom keys, but for this you need to provide the code from the SMS message, allegedly sent from the company. By gaining access to the code, fraudsters can access the account on "Gosuslugi".
The danger of this scheme is that the personal account on "Gosuslugi" contains all the most important electronic copies of a citizen's documents. It is likely that the attackers will not have time to issue loans or borrowings in the victim's name (but this is not excluded) by the time access is restored by the rightful owner. But it is guaranteed that they can copy all this information into their databases and use it not only in the moment.
It often happens that after restoring access to the personal account and confidence in security, the victim after a while faces a whole series of fraudulent attacks using various schemes.
It would be fair to say that anyone who gave the code from the SMS over the phone can be considered a victim. And, unfortunately, there are hundreds of thousands of such victims across the country.
The expert also reported that the myth about the need to replace intercom keys in connection with the maintenance of entrance groups and doors of entrances by the management company appeared relatively recently. About a year and a half ago, it began to be used in fraudulent schemes related to QR codes. Announcements about the replacement of intercoms and keys were distributed on boards at entrances and in house chats.
Each such announcement contained a QR code, allegedly necessary for applying. In fact, these codes led to phishing sites and infected residents' devices with malicious software that allows you to monitor the device or remotely control the gadget, which means gaining access to the victim's services and personal accounts.
However, over time, the QR code scheme ceased to be so effective, and then the attackers began to use a more traditional method of telephone fraud, in which they pose as owners of intercom keys and try to find out the second factor access code to the account on "Gosuslugi", the expert noted.
Earlier, the State Duma proposed to strengthen protection when restoring access to the "Gosuslugi" portal.
Read materials on the topic:
Russians will be able to check SIM cards registered to them on "Gosuslugi"
Roskomnadzor identified 10 cases of personal data leaks of Russians in January 2025
Fraudulent networks: almost 40% of cybercrimes in Russia are committed using IT technologies
The Federation Council proposed to identify "white" hackers through the "Gosuslugi" portal
Fake neural networks threaten the data security of Russians