China's CVERC warns of fake HR and social security subsidy notices phishing for bank cards and PINs

CVERC warned that cybercriminals are spreading fake human resources and social security subsidy notices to mobile users in an attempt at fraud ^[1]. The documents claim companies' staff will receive subsidies and lure victims to a spoofed official site to enter their name, ID number, bank card, phone number and password, putting their funds at high risk ^[1]. CVERC says no official body or subsidy process asks for bank card PINs or SMS codes, and anyone who submitted data should immediately freeze the card, change online banking passwords and report to police ^[1].

Industries mainly affected: Finance, Government

1. Subsidy policies are published only on official ministry sites and accounts; ignore circulated "subsidy notices" ^[1].
2. Type official domains manually and do not click unknown links in PDFs, SMS or chats ^[1].
3. If you submitted data, freeze the card, change banking passwords and report to police immediately .