The Cybersecurity Division of Haiphong police said it had found bcavneid.com, a website impersonating the VNeID electronic identification and authentication system. Its structure, logo and interface closely copied the official platform, making it easy for users to miss the deception if they did not check the web address.
The scammers used a domain combining an abbreviation associated with a government authority and the application's name. When users logged in, the operators' server recorded their identity card number, phone number, password and OTP sent to the victim's phone and entered on the fake website.
Using this information, the operators could take control of an electronic identification account and access linked financial services, banking applications or e-wallets to make illegal withdrawals. Some schemes also persuaded users to grant deeper access or download suspicious files, allowing malware to control the device remotely.
The scheme is often combined with psychological manipulation. Scammers pose as police officers or administrative officials, claim that a level-2 identification account has a problem, and demand that the user urgently synchronise documents or activate the account. They then send a link by SMS or through social networks.
Police advised residents to use online public services only on official portals ending in .gov.vn. VNeID should be accessed through the official application issued by the National Population Data Centre on the App Store or Google Play, or through the official portal of the Ministry of Public Security. Users should not open unfamiliar links shared by message or social media.
Residents were also advised not to enter banking passwords, PINs or OTPs on unverified websites. Anyone needing help with a digital identification account should go directly to the nearest police office.
Sources: Thanh Niên
