Loading story…
Dubai Police warned residents about fraudulent insurance providers advertising misleading low-cost vehicle and health coverage on social media, saying many of the offers came from unlicensed entities posing as legitimate insurers. Officials urged the public to verify company licences, policy documents, and broker credentials before making payments, and said specialized teams are monitoring the scams and preparing legal action. Residents were also encouraged to report suspected fraud through the eCrime platform or by calling 901.
In a separate but related fraud case, the UAE Public Prosecution said it is investigating a cross-emirate network that sent fake SMS messages claiming recipients could settle minor toll-related traffic fines at a discount. Victims were directed to malicious links where they entered bank card details, leading to unauthorized withdrawals. Investigators traced the operation to an apartment in Ajman, arrested a local suspect, and seized 22 electronic POS devices allegedly used to process fraudulent transactions with stolen card data. Prosecutors said the wider scheme was coordinated remotely by a suspect outside the UAE and involved fraudulent companies and bank accounts in Sharjah and Ajman, with at least 35 reports filed across multiple emirates.
Get the infrastructure and lures behind it.
4 events from the most recent confirmed update back to the earliest known activity.
Investigators said the fraud operation was part of a broader scheme coordinated remotely by a Pakistani national outside the UAE, who allegedly supplied stolen card details and helped establish fraudulent companies and bank accounts in Sharjah and Ajman. UAE authorities said they were pursuing the main suspect through international cooperation.
A specialized anti-fraud team traced the fake SMS scam to a residential apartment in Ajman and arrested a suspect believed to be managing the operation locally. Authorities also seized 22 electronic POS devices allegedly used to process fraudulent transactions with stolen card data.
The UAE Public Prosecution opened an investigation into a cross-emirate fraud network that sent fake SMS messages offering discounted settlement of minor toll-related traffic fines, leading victims to malicious links where their bank card details were stolen and used for unauthorized withdrawals. Investigators linked at least 35 reports across multiple emirates to the scheme.
Dubai Police warned residents about scams involving unlicensed insurance providers advertising misleading low-cost vehicle and health insurance offers on social media. Authorities urged the public to verify licences and broker credentials, report suspected fraud, and said specialized teams were monitoring the scams and preparing legal action.
Get the infrastructure, lures, and IOCs behind this campaign, ready to push into your email and identity stack.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
National cyber authorities in Croatia and Slovenia warned of an active SMS and iMessage phishing campaign that falsely tells recipients they owe traffic fines and must pay immediately through linked websites. In Croatia, **CERT.hr** said the messages direct users to fake pages mimicking the official **ePrekršaji** dispute-resolution portal, while police stressed that traffic fine notifications and payment requests are **not** sent by SMS. In Slovenia, **SI-CERT** reported that attackers impersonated the police and the Ministry of the Interior, claiming victims owed a **€39** road-traffic penalty and pushing them to newly registered phishing domains. The Slovenian campaign rapidly scaled, with roughly **100** different URLs observed across unique newly registered domains, and victims who entered payment-card details saw them abused almost immediately for high-value online purchases. SI-CERT said the operation later expanded to additional lures involving unpaid income-tax prepayments and undelivered packages, with matching indicators suggesting the same actors were behind all variants. Both agencies urged citizens not to click links, reply to the messages, or submit personal or financial information to the fraudulent sites.
Jul 24, 2026
A smishing campaign is sending fake traffic violation, toll evasion, and DMV-related text messages to drivers across multiple U.S. states and other countries, impersonating courts, motor vehicle agencies, and toll operators such as **E-ZPass**. The messages pressure recipients with claims of unpaid fines, license suspension, or arrest, often cite small balances such as **$6.99**, and direct targets to malicious links or QR codes designed to harvest personal and financial information. Reported activity spans New York, California, North Carolina, Illinois, Virginia, Texas, Connecticut, and New Jersey, with similar lures also observed in Canada and India. Researchers said the campaign increasingly uses embedded QR codes to bypass security filters, sometimes sending victims through a CAPTCHA-protected intermediary page before redirecting them to spoofed payment portals. Observed phishing infrastructure included domains such as `ny.gov-skd[.]org` and `ny.ofkhv[.]life`, while the texts often originated from random or international numbers. State agencies said they do not request payment or sensitive information by text message, and recipients are being urged not to click, scan, or reply, to verify any alleged violation through official websites or contact channels, and to report the scam to their mobile carrier, the **FTC**, and the **FBI IC3**; anyone who submitted payment data should contact their bank immediately and replace affected cards.
Jul 4, 2026
A large-scale smishing operation sent fraudulent mobile text messages that impersonated toll road operators, package delivery firms, and government agencies, luring victims to mobile-optimized phishing sites built to steal credentials, payment card data, and other sensitive information. Researchers linked the activity to industrialized phishing infrastructure using spoofed brands, dynamically generated subdomains, low-cost `.top` and `.cc` domains, Let's Encrypt certificates, geo-fencing, and cloud-hosted servers, with campaigns targeting services in the UAE, Singapore, and other regions including transportation, logistics, and public-sector brands such as Emirates Post, Salik, Parkin, Dubai Police, Aramex, and Singapore's Land Transport Authority. Google said it filed a lawsuit against a China-linked scam network known as **Outsider Enterprise**, alleging the group abused **Gemini** to help create phishing content and fake websites impersonating brands including Google, YouTube, and **New York E-ZPass**. According to the filing, the operation marketed phishing-as-a-service through Telegram with nearly 300 scam templates for customers, while Google coordinated with **AT&T**, **Verizon**, and **T-Mobile** to block malicious texts; the company also said Google Messages scam detection now blocks about **10 billion** scam texts each month.
Jul 7, 2026