Cybercrime Southeast Europe Newsletter No. 75

by | Oct 10, 2025 | NSSPV, Unions Market and others | 0 comments

The Serbian Tax Administration has recently warned citizens about a new type of scam spreading via email. Fraudsters are sending messages requesting recipients to “update bank account details” for tax refunds. These emails are designed to look official, sometimes including logos or references to the Tax Administration.

It is important to note that official communication from the Tax Administration only comes from addresses ending with @purs.gov.rs. Any email from other addresses asking for personal or banking information is a phishing attempt and should be deleted immediately, without opening attachments or clicking any links. Opening or interacting with these emails can lead to identity theft and financial loss.

These scams rely on psychological pressure – the email appears urgent, promising money back, and creates a sense of fear or obligation. Scammers count on impulsive reactions, hoping recipients will click links and provide information that allows them to steal money or personal data.

To protect yourself, follow these guidelines:

  • Do not open suspicious attachments or click links from unknown addresses;
  • Delete such emails immediately;
  • Do not enter personal or banking information except through official channels;
  • Verify every email independently, by contacting the Tax Administration or your bank directly;
  • Pay attention to grammar mistakes, unusual tone, or other inconsistencies, which often reveal a fake email.

This type of phishing scam is part of a wider trend of digital fraud in the Balkans, becoming increasingly sophisticated. Awareness, verification, and careful handling of all communications remain key to protecting your data and finances.

Kind regards,
Attorney Zoran Miljaković