A phishing campaign targeting Italian drivers is circulating ahead of the expected abolition of annual vehicle taxes for medium and small cars, using the name and logo of the Automobile Club d’Italia to deceive victims. The Computer Emergency Response Team of the Agenzia per l’Italia Digitale (CERT-AGID) has identified the fraud, which operates on fake domains mimicking official communications to demand payment for a supposed tax debt.
The Fake Domains
Scammers have registered domains that look official but are not connected to the ACI infrastructure. The fraudulent sites are hosted on acitalia[.]info and acitalia[.]click. These portals replicate the visual style of the real organization to appear legitimate to users who are not looking closely at the web address.
How the Fraud Works
The attack follows a three-step process designed to gather sensitive information. First, visitors are asked to enter their tax code and vehicle registration plate to verify the status of the tax payment. Once this initial information is provided, the site shifts to a contact page to collect full personal details, including name, surname, address, email, and phone number. In the final stage, a screen appears showing a demand for a fine of €15.87, requesting the complete details of a credit card to process the payment.
Read Also: Stellantis Launches Art Accessibility Initiative at Turin’s GAM
Official Channels
Automobile Club d’Italia officials emphasize that legitimate payments for vehicle taxes must be made exclusively through Public Administration channels. The only secure methods are those requiring SPID or CIE authentication. Any request for personal or financial data outside of these official portals should be treated with suspicion, even if the website design appears convincing.
Steps to Take if Affected
Victims who have entered data on the fraudulent site must act immediately to limit damage. The recommended steps are to contact the bank to block the compromised card, file a complaint with the authorities, and preserve all evidence, such as screenshots of the website and any communications received. The association Codici provides free legal support to victims of online fraud, emphasizing that this type of scam exposes users not just to identity theft but also to direct economic loss. For those seeking further assistance, the association offers specific contact points for reporting and support.
Contacting Assistance
For those seeking further assistance, the association Codici provides free legal support to victims of online fraud: it is possible to contact it by calling 06 5571996, via WhatsApp at 375 7793480 or via e-mail at segreteria.sportello@codici.org. The association advises anyone who has already entered their data on the fraudulent site to contact their bank immediately to block the card used, file a complaint with the competent authorities, and keep screenshots and communications received as proof.
