French Health Insurance Scam: Fake Mail & QR Code Phishing Alert

A new phishing scam is circulating, but unlike typical schemes delivered via SMS or email, this one arrives through traditional postal mail. Scammers are impersonating the Caisse nationale d’Assurance maladie (CNAM), leveraging meticulous detail – including accurate logos, postal addresses, and flawless spelling – to deceive recipients, according to Le Journal du Geek.

A Website Mimicking Ameli

The fraudulent mailings alert recipients to a “new security procedure” for their Ameli accounts and their carte Vitale. Individuals are directed to scan a QR code included in the letter to verify their identity, under the threat of having their benefits suspended within 72 hours.

Driven by this urgent timeframe, victims who scan the QR code are led to a website closely resembling the official Ameli site. There, they are prompted to enter their login credentials and banking information.

Did You Know? The fraudulent letters do not include personalized information such as the recipient’s name, first name, or insurance number, despite the QR code being presented as “unique.”

Identifying the Scam

While the letters are designed to be convincing, several inconsistencies can raise red flags. The lack of personalized addressing – no name, first name, or insurance number – is a key indicator. The short timeframe provided to “validate” identity, coupled with the threat of benefit suspension, should also prompt skepticism.

This scam emerges alongside another scheme targeting individuals with emails offering a new carte Vitale, falsely claiming their existing card will soon be obsolete. However, a carte Vitale is provided free of charge and does not expire.

Expert Insight: The shift towards physical mail for phishing attacks represents a sophisticated tactic, exploiting a perceived higher level of trust associated with official correspondence. This underscores the need for heightened vigilance, even when receiving communications that appear legitimate at first glance.

Frequently Asked Questions

What is the purpose of this scam?

The purpose of this scam is to steal personal and banking information from individuals by tricking them into entering it on a fraudulent website that mimics the official Ameli site.

What is the timeframe provided to victims?

Victims are given only 72 hours to scan the QR code and validate their identity, under the threat of having their benefits suspended.

Is there another similar scam currently circulating?

Yes, another scam involves contacting victims by email and offering a new carte Vitale, falsely claiming their current card will expire.

How can individuals best protect themselves from increasingly sophisticated fraud attempts?