False requirements of companies impersonating the social security authorities

Recurring campaigns have been detected in which the Social Security or one of its agencies (such as TGSS, INSS or ISM) is impersonated.

How is it done?

By sending emails that appear to be official requests but which turn out to be fake.

Who is it aimed at?

Companies that have been awarded a contract following a tender process; they are requested to provide supporting documentation, such as provisional and final performance bonds, a receipt for Business Activities Tax, and a bank account ownership certificate, amongst other documents. In some cases, payment of a sum by bank transfer has even been requested, either as a deposit or to cover the costs of publication in the Official State Gazette.

Why?

Using this information, the perpetrators could make a financial gain by subsequently impersonating the successful tenderer to collect their fees, debiting expenses from their bank accounts or directly claiming payments from them for various reasons.

What do we recommend?

Being wary of emails asking you to send documents via email, rather than through official channels such as the Social Security Online Portal and/or the Electronic Register. If the email contains links, it is best not to click on them; instead, you should use the official channels and websites.

How can you tell if they are fraudulent?

They usually contain:

• Spelling mistakes.
• Unfinished or poorly worded sentences.
• Outdated or pixelated logos.
• Requests for sensitive data

Recommendations and resources

If in doubt, call the official Social Security telephone numbers to check whether the communication is genuine or not. Further information is also available on the website of the National Cybersecurity Institute (INCIBE).