Bank security | phishing email pretending to be from the BCRA

Monday, April 26, 2021

This email purports to be an email from the BCRA. It is worth pointing out that the BCRA does not request personal or banking data by email.

We have detected a phishing email claiming to have been sent by “International Transfers .BCRA.” In this regard, it is worth pointing out that the BCRA does not request personal or banking data by email.

This email purports to be an email from the BCRA and is sent from 025417@bcra.gov.ar, an account that does not belong to the BCRA. BCRA’s email addresses have the following official domain: @bcra.gob.ar.

If you receive such email, or a similar one, we recommend you immediately delete it as it is a phishing attack, i.e., a deceptive email that pretends to be legitimate and is used to obtain banking and personal data.

How to Recognize Phishing Attacks
They usually display some or all the following telltale signs:

1. Sender: unknown contacts or anyone purporting to be recognized organizations or individuals, usually misspelled.

2. Email address: it seemingly looks like the real address; however, it may have an extra letter, or else any other letter may be added, deleted or replaced by a number. For example: hxxps://banco-central[.]xxxxxx[.]com/xxxxx (the right address is: https://bcra.gob.ar/).

3. Subject and content: phishing usually involves an unexpected email requesting immediate action or informing about imminent danger.

4. Links and attachments: the content usually redirects to links or requests data or the downloading of malware files or programs known as virus.

Transcription of the fake email:

De: Banco Central – ID 0254 <025417@bcra.gov.ar>

Asunto: Información sobre su transferencia en dolares del exterior – 4/25/2021 5:54 PM

Estimado xxx, le informamos que tiene una transferencia entrante en dólares de un banco extranjero, debido a la suma de dicho monto y por las regulaciones actuales que rigen en el BCRA (Banco Central De La República Argentina) con respecto a entradas de dinero en divisa extranjera mayores a U$D 10.000 (DIEZ MIL DOLARES) se solicita abonar los impuestos de la misma para su acreditación inmediata en su cuenta bancaria.

La misma es de $18.870 (DIECIOCHO MIL OCHOCIENTOS SETENTA PESOS)

Una vez abonado dicho impuesto su transferencia entrante se pesificará en el acto al tipo de cambio actual.

Se le adjunta un CBU / CVU para el pago de dicho impuesto.

Titular de cuenta BCRA: Gianluca Bonomi CBU / CVU: 0000003100098619960754

Monto: $18.870

Desde ya lo saluda cordialmente.

Vanina L. Fonsalida.

Transferencias Internacionales.

BCRA.

BCRA phishing

How to Report a Scam or Fraud What to do if you identify a virtual fraud or trickery

You may contact the Specialized Cybercrime Unit (Unidad Fiscal Especializada en Ciberdelincuencia, UFECI).

Address: Sarmiento 663, 6th floor, Autonomous City of Buenos Aires

Telephone: (+54 11) 5071-0040 / 0041

Email: denunciasufeci@mpf.gov.ar

If you receive information or messages purporting to be from the BCRA, you may forward them to Online Support (ayudaenlinea@bcra.gob.ar).

Share on