Fake News & Celebrity Endorsement Scams

In a sophisticated wave of attacks targeting the public, scammers impersonated the ‘Ministry for Finance’ to target several customers of a local bank. A resident we will call Elena was one of those who received what appeared to be an official SMS notification. The message alleged that she had urgent ‘unpaid taxes’ and ‘compliance issues’ that required her immediate attention. Almost immediately after the message arrived, Elena received a phone call from an individual who spoke with professional authority, reinforcing the sense of urgency and claiming that her bank account was at risk unless she acted within the hour.

Believing she was speaking with a legitimate government official, Elena was guided through what she thought was a secure verification process. The caller, mimicking the formal language used by government entities, persuaded her to provide sensitive information including her bankaccount details and ‘one-time passcodes’. To ‘protect’ her capital during this purported tax audit, the fraudster instructed Elena to transfer her savings into a ‘secure’ or ‘safe’ account managed by the Ministry.

Another victim, whom we will call David, received a similar email that looked identical to official government correspondence. The email prompted him to click a link to a fraudulent portal to settle an ‘urgent account verification requirement’. Driven by the fear of facing legal penalties or having his assets frozen, David followed the instructions and divulged his login credentials. By the time these individuals realized they had been deceived by a ‘government impersonation’ scam, thousands of euros had already been fraudulently moved into offshore accounts. This case highlights how criminals exploit the trust citizens place in public institutions to bypass traditional security awareness.

Warning signs and red flags:

• The contact originates from an individual or message claiming to represent a high-level government authority.
• Communication focuses on urgent threats involving unpaid taxes or immediate legal compliance issues.
• There is a direct request for sensitive banking credentials such as passwords and one-time passcodes.
• The perpetrator uses high-pressure tactics to force a decision before the victim can verify the claim.
• Instructions are given to move funds into a specific ‘safe’ or ‘secure’ account for protection during an investigation.

Disclaimer: This account is based on a real-life case investigated by the authorities. While the events and figures described are factual, names have been changed to protect the privacy of the individuals involved.

A Maltese citizen we will call Anna was using her laptop when a sudden pop-up notification appeared, designed to look as though it originated directly from the ‘Malta Police Force’. The message contained a startling allegation, claiming that illegal adult content had been accessed on her device. To resolve the supposed legal violation, the notification stated that an immediate financial payment was required.

The pop-up was not a standard advertisement; it acted as a form of ransomware that effectively locked Anna’s browser and prevented her from using her laptop. This technical restriction, combined with the serious nature of the accusation, created a state of extreme urgency and fear. Feeling pressured to regain access to her device and clear her name, Anna followed the instructions and made the requested payment.

Shortly after the first transaction was completed, a second pop-up appeared on her screen demanding an additional payment for further ‘legal clearances’. At this point, Anna’s suspicion grew, and she decided to contact the ‘Malta Police Force’ helpline directly. The officers on duty confirmed that the notification was entirely fraudulent and that the police never use pop-ups or digital lockouts to collect fines. It was only then that Anna realised she had been targeted by criminals who had carefully impersonated law enforcement authorities to exploit her trust and concern.

Warning signs and red flags:

• Pop-ups that claim you have accessed illegal material are a frequent tactic used by cyber criminals to incite panic.
• A legitimate law enforcement agency will never use a browser pop-up to restrict your hardware access until a payment is made.
• Requests for an immediate financial penalty to be paid via an online portal are not a part of any official legal process.
• Criminals often impersonate police authorities by using official logos and high-pressure language to gain your compliance.

Disclaimer: This account is based on a real-life case investigated by the authorities. While the events and figures described are factual, names have been changed to protect the privacy of the individuals involved.