Beware of the fake Tari refund scam: how to protect yourself from phishing
A new phishing campaign is targeting Italian citizens, exploiting the name and image of the PagoPA system. Scammers are sending deceptive emails or messages promising a refund on the Tari (waste tax), inviting users to click on a link to receive the money. This is a fraudulent attempt to steal personal data and banking information.
The scam mechanism is designed to appear official and reliable. The messages often contain the PagoPA logo and formal language that encourages the victim not to doubt the communication. Once the link is clicked, the user is redirected to a counterfeit website that graphically imitates the institutional portals of the public administration.
On this fake site, users are asked to enter their credit card details or online banking login credentials under the guise of needing to credit the refund. In reality, cybercriminals use this information to drain the victims' bank accounts or to carry out further illicit operations in their name.
The competent authorities and the Postal Police recommend maximum caution. It is important to remember that public bodies never request sensitive data, such as credit card codes or passwords, via email or SMS. Furthermore, tax refunds are usually handled through the official channels of the municipality of residence or through the Revenue Agency, and never via links sent in private messages.
To protect yourself, experts advise never to click on links contained in suspicious messages and to always verify the sender's email address. In case of doubt, the advice is to contact your municipality directly or to access the official portal of the entity through certified channels. If you have already fallen into the trap, it is essential to block your cards immediately and file a report with the police.