A new online fraud method has been registered in Azerbaijan. While previously, emails sent from various international domains (@gmail.com, @hotmail.com, etc.) aimed at obtaining users' phone information were common, scammers are now directly using the lindpro.az domain, registered with the .az country-code top-level domain (ccTLD).
The editorial office reports that scammers present themselves as a local company and send users a .rar file named SWIFT. The email is titled “RE: Վճարում”, making it appear as if there was prior correspondence. A notable point is that the word “Վճարում” is written in Armenian and translates to “payment” in English.
In one email, two texts are combined and presented in Azerbaijani as follows: “Greetings, the Proforma invoice is attached, I am awaiting your payment copy” and “Hello, proof of the payment made this morning is attached, please confirm receipt of funds.” This method attempts to create the impression of a real financial transaction for users.
Our investigations have determined that the sender's email address appears as e***@lindpro.az, and the lindpro.az domain represents the same individual whose initials are E. A. This indicates that a sense of legitimacy is being created by establishing a correspondence between the domain registration and the sender's address.
Citizens are advised that when encountering such emails, they should immediately check the domain name in the sender's email address, inform law enforcement agencies and the contact section of the online.az website in suspicious cases, and also mark the email as SPAM. Experts state that opening unknown .rar files can lead to the theft of personal and financial information.
