Fake Court Documents Used to Steal ID Information Through Phishing Emails in Turkey

Overview of the Scam

A new phishing scam campaign is targeting residents in Turkey. Fraudsters are impersonating official court and notary notifications by mimicking the logos and designs of the National Electronic Notification System (UETS). The scams use threatening messages such as "You have a notification" to trigger fear and panic in unsuspecting victims.

How the Scam Works

Victims receive deceptive emails that appear to come from legitimate government sources. When users click embedded links, they are redirected to counterfeit websites that closely replicate the authentic government portal interface. Any ID number or e-Devlet password entered on these fake pages is immediately transmitted to the scammers' database.

The danger escalates further when victims download what appears to be an Excel file attached to the email. Unknown to the user, the file actually contains Remote Access Trojan (RAT) malware. Once activated, this malware grants criminals remote control over the victim's computer, tablet, or smartphone. The scammers then exploit stolen personal information to demand ransom payments in cryptocurrency.

How to Protect Yourself

Verify the Email Address Turkish government agencies exclusively use email addresses ending in "gov.tr". Any email from an address with a different domain should be treated with suspicion, regardless of how the sender's name appears.

Never Click Links in Unsolicited Emails Do not click links or download attachments from emails or text messages claiming to be official notifications. Instead, when accessing government services:

• Type "turkiye.gov.tr" directly into your browser's address bar
• Use the official mobile application

This approach ensures you reach the legitimate site without risk of redirection.

If You Become a Victim

Immediate action is critical:

1. Change your e-Devlet password immediately
2. Perform a complete device reset (format) to remove any malware
3. File a criminal complaint with the local public prosecutor's office

Swift response significantly reduces the damage caused by such scams.