Security companies detected a surge in fraud related messages to stealing photos of documents and selfies with them.
In phishing emails, seemingly from payment systems and banks, users are asked to confirm their identity by going to a special page and upload a selfie with an ID document. The fake sites look quite believable, and provide a list of necessary documents with format requirements, links to privacy policy, user agreement, etc.
It is not just e-mail and websites. In some cases users receive emails about a smartphone giveaway. To receive the prize, victims have to send a photograph of an ID document and a selfie to the specified email address. To encourage victims to respond, the scammers state that the offer will soon expire.
To obtain copies of documents, scammers also send fake Facebook messages in which recipients are told that access to their accounts has been restricted due to complaints about the content of some posts. To prevent their account from being deleted, they are instructed to send a photo or scan of a driving license and other ID documents with a selfie, plus medical insurance details.
Always check the URL, if the site is legitimite. If you doubt the sincerity of the email of the website you can contact CERT-UT.
