Kaspersky Lab has warned Russians about a new scheme by fraudsters. They not only extort data and money from users, but also steal photos of their faces. Attackers pose as sellers on classifieds sites and offer to switch to third-party messengers to communicate.
The scammers send a link for payment that leads to a phishing site. After entering card details and transferring money, the victim receives a request to confirm their identity to complete the transaction. To do this, you need to provide access to the device's camera and show your face from all angles, "placing your nose in the center of the green zone." After that, nothing happens, and a notification appears on the screen offering to close the page.
In this way, attackers are trying to obtain money, payment details, and detailed portraits of people. It is likely that detailed images can potentially be used by fraudsters in the future, including for stealing accounts in those services where they ask to confirm identity by video.
It is important for users to be careful about any online offers that ask them to share confidential information. Before granting a site access to personal data or the camera, make sure that the site address matches the original.
If you notice any discrepancies, be vigilant. To protect against phishing, it is recommended to use special programs that warn about attempts to go to fake resources.
Earlier it became known that a pilot project will be launched in Russia to block fake sites that steal passwords and personal data. The system will operate in test mode until March 1, 2026.
Read also on the topic:
How to protect your smartphone from cyber fraud: the most reliable ways
Russians will be protected from cyber fraud: what will change from June 1, 2025
Russians warned of a surge in fraudulent attacks via SMS and emails: what to do
AI account hacks in Russia have increased by 90% - users are losing control of personal data
How not to accidentally become a dropper: simple rules
