Scammers Are Using AI to Make Fake Government Websites. Here's How to Spot Them

Security researchers discovered a complete toolkit that criminals use to create fake websites and steal your information. The toolkit was accidentally left open on a server, revealing over 1,000 files including fake website templates and malware programs. One active scam targeted Windows users in Mexico with a fake government ID lookup site. This particular attack affected people in Mexico who were looking for government ID information. When victims visited the fake website, it infected their computers with software that steals passwords, bank information, and other personal data. The criminals used WebDAV technology to deliver the malware, and the site looked official enough to fool people searching for legitimate government services.

Here is what you should do to protect yourself right now:

1. Never click links from search results for government services. Instead, type official government website addresses directly into your browser or use bookmarks.
2. Before entering any personal information on a website, check the address bar carefully. Government sites should have official domains like .gov or your country's equivalent.
3. If a website asks you to download or run a file to view information, stop immediately. Legitimate government sites display information directly in your browser.
4. Keep your computer's antivirus software updated and running. Make it a habit to verify websites before entering personal information. When you need government services, call the official phone number or visit in person to confirm the correct website address. Be extra cautious with any site that appears in search results for sensitive services like ID verification, tax filing, or benefits applications. Criminals count on people being in a hurry and trusting what looks official.