“Renew your health card”, don’t open that email: the scam that steals all your data

One is filming these days wave of emails about health card renewal which is creating confusion and, in many cases, real damage. Carefully written messages, reassuring logos and a tone that recalls the urgency typical of official communications. The problem is that . Behind those emails lies a phishing attempt that unduly exploits the name of the Ministry of Health to steal personal data from citizens.

Behind those communications lies a scam attempt that improperly uses the name of the Ministry of Health and targets citizens’ personal data. There is nothing random. Public health is a sensitive, familiar topic, and just mentioning it is enough to lower our defenses. This is how phishing today no longer shouts, does not threaten, but insinuates itself politely.

What happens when you open an email about renewing your health card

The message invites you to click on a link to proceed with a presumed renewal. No obvious errors, no absurd requests. The link leads to a site that looks very similar to the institutional ones, with clean graphics and a formal language. Here you are asked to enter personal data, tax code and other sensitive information.

It is in this step that the scam takes place. The data entered is not used to update any document, but ends up in opaque circuits where it can be reused for identity theft, cloning or other illicit activities. Consequences often emerge late, when linking cause and effect becomes difficult.

What is not said in the emails and which helps to unmask the scam

There is one key element that makes these emails immediately suspicious. The health card is valid for six years and, under normal conditions, . Upon expiration, the new card is automatically sent to the residence address. No links, no improvised forms, no emails with requests for personal data.

Official communications follow very specific channels and, when you need to make a request, you go exclusively through institutional portals, such as that of the Revenue Agency. Everything else is background noise, or worse, an attempted deception.

The point is that today we are used to managing a large part of our administrative life online. And it is precisely this digital normality that makes it easier to let our guard down. Scams work when they push us to act quickly, without checking, taking advantage of the feeling that “everything is OK”.

In the image accompanying this article you can see one screenshot of a fraudulent site currently in circulation. At first glance it might seem authentic, and that’s exactly the problem.