Cybercriminals are constantly refining their deception methods, utilising new technologies and social engineering. Your task is to stay informed about current schemes and be able to communicate this information to citizens. Below are the most common fraud scenarios and prevention recommendations.
Main Cyberfraud Schemes
Fraud posing as utility service employees and government officials. Malicious actors impersonate employees of utility services (energy supervision, water utility, gas service), as well as representatives of law enforcement agencies, banks, or other government structures. They may call by phone, including landlines, or use messengers (Viber, Telegram, WhatsApp). The goal is to obtain personal data, bank card details, or to coerce the victim into transferring money to "secure" accounts under any pretext. They often work in pairs: one poses as a utility service employee, the other as a law enforcement officer or bank representative, convincing the victim that their data has been compromised and that they need to take out a loan or transfer money to "save" their funds.
Fraud using mobile communications. Scammers pose as employees of mobile operators (A1, MTS). Under the pretext of a contract expiry or the need to update services, they persuade the victim to click a link from a messenger and download a fake application. Such applications give attackers full access to the data on the smartphone, including codes from SMS messages, and logins and passwords for online banking. It is important to remember: safe app downloads are only possible from official stores such as Google Play, App Store, App Gallery. Never install applications by following suspicious links.
Use of deepfakes and neural networks. Cybercriminals actively employ neural networks to create fake voice messages and videos (deepfakes) using the voice or image of the victim's relatives and acquaintances. These fake messages are then sent to the victim's contacts with requests for financial assistance for treatment or other needs, often specifying bank card details or asking to transfer money through an "acquaintance".
Psychological pressure and threats. Scammers, posing as law enforcement officers or even your manager, write in messengers, reporting alleged crimes committed by you or your complicity in them. They may threaten searches, seizure of property or funds. To "save" money, they offer to transfer it to a "secure" account or hand it over to a courier, who is actually their accomplice. In such cases, scammers may even "transfer" the victim to dummy "employees" of various departments (police, Investigative Committee, KGB, DFR, State Control Committee).
Financial pyramids and fake investments. This is one of the most dangerous schemes. Scammers, posing as brokers or traders of trading platforms, offer victims quick and high returns from investments. They create fake websites of non-existent exchanges with simulated charts and diagrams, register "personal accounts" and demonstrate "profits". They may even allow a small amount to be withdrawn to convince the victim of the reality of earning. The goal is to force a person to invest as much money as possible, including borrowed funds or money from the sale of property. After receiving a large sum, the scammers disappear.
Use of "drops" and responsibility. To withdraw stolen funds, scammers actively use "drops" – dummy individuals who, for a reward, provide access to their bank accounts. "Drops" are a key link in the criminal chain, through which money is transferred through several banks to foreign accounts or converted into cryptocurrency. It is important to know and inform citizens: "drops" bear criminal liability for the dissemination of other people's data for access to bank accounts under Article 222 of the Criminal Code, which provides for punishment up to 10 years of imprisonment. For providing personal data for use in fraudulent schemes, administrative liability is provided under Article 12.35 of the Code of Administrative Offences.
Regulation of cryptocurrency circulation in the Republic of Belarus. Operations for buying and selling cryptocurrency for money (Belarusian rubles, foreign currency or electronic money) are allowed only through crypto exchanges (cryptocurrency exchange operators) that are residents of the Hi-Tech Park. Operations for buying and selling cryptocurrency are prohibited and illegal
on foreign crypto exchanges and from individuals. The procedure for carrying out transactions with cryptocurrency is regulated by Decree of the President of the Republic of Belarus No. 367 of 20.09.2024, violation of which entails liability under Part 3 of Article 13.3 of the Code of Administrative Offences, providing for a fine with confiscation of the entire amount of income.Recommendations for law enforcement officers. Constantly increase your awareness of new types and schemes of cyber fraud. Follow news, analytical materials, and recommendations from relevant departments. Pay special attention to vulnerable categories of citizens: the elderly, minors, as well as those who actively use the internet but are not sufficiently aware of the risks. Emphasise the importance of critical thinking: teach citizens to verify any information, especially that which causes concern or offers easy profit. Explain that law enforcement agencies, banks, and government structures never request confidential data by phone or messenger and do not require money transfers to "secure" accounts. Focus on the responsibility of "money mules" so that citizens understand the risks of providing their accounts to third parties. Explain the rules for the legal circulation of cryptocurrencies in the Republic of Belarus.
Remember: our common goal is to protect citizens from criminal encroachments in the digital space. The better informed law enforcement officers are, the more effectively we can counteract cybercrime.