A wave of phishing scams targeting businesses and individuals has been reported across Slovenia, with fake emails claiming to offer tax refunds from the Financial Administration. The messages, which have circulated via email in recent weeks, appear to originate from the Financial Administration of the Republic of Slovenia, urging recipients to click on links to process their refund through the eDavki portal. However, these communications are fraudulent and designed to steal sensitive information. The scam was first identified after a similar message reached the email inbox of Gorenjski glas, a local newspaper. The message claimed the Financial Administration had approved a tax refund of €7,483 for the recipient’s company, requiring them to complete an administrative obligation through the eDavki portal. The email included a link for processing the refund, but the domain used, edavki-po.com, is clearly not associated with the official Financial Administration. This discrepancy immediately raises red flags for cybersecurity experts. According to the National Cyber Security Response Centre (SI-CERT), the messages are part of a broader phishing campaign that has become increasingly common in recent months. These attacks typically involve deceptive emails, SMS messages, or private messages that prompt users to click on links or provide personal data. SI-CERT emphasized that users should never open links or attachments unless they are certain the communication comes from a legitimate source. If someone has already clicked on a phishing link and entered personal information, such as passwords or banking details, they are advised to change passwords immediately and contact their bank. In addition to the tax refund scam, similar phishing attempts have targeted individuals under the guise of the Statistical Office of the Republic of Slovenia. These messages aim to gather business-related information, which can later be used in more sophisticated cyberattacks, including Business Email Compromise (BEC) schemes, CEO fraud, or changes to banking details of business partners. According to SI-CERT, the primary targets of these attacks are accounting and financial departments within companies. Meanwhile, police in Koper have reported two separate incidents involving physical encounters with potential victims. In one case, a man in Kopra was approached by a couple who claimed to be Polish citizens stranded abroad due to a lack of cash and proper credit cards. They asked him to lend €400, promising to repay it via online transfer. In another incident, a Hungarian woman at the Lom rest area was approached by a man who claimed to have lost his wallet in Zagreb and requested €500, assuring her he would transfer the money to her account within one to two days. A companion of the man showed her a phone displaying a supposedly successful transaction. Both cases were confirmed as scams by local authorities. Police in Koper issued warnings to the public, urging caution against such tactics. Anita Leskovec, a spokesperson for the Koper Police Department, stated that these incidents highlight the need for vigilance. She recommended that anyone encountering suspicious behavior should immediately report it to emergency services at 113, providing as much detail as possible about the suspects. Authorities have also reminded the public that banks and government agencies generally do not request card details or other sensitive information through unsolicited emails or text messages. If individuals suspect they have fallen victim to a scam, they should contact their bank, change affected passwords, and review the security settings of their accounts. Additionally, they are encouraged to report suspicious messages to the national cybersecurity response center, SI-CERT. Cybersecurity experts continue to monitor the situation, warning that such scams are likely to evolve and become more sophisticated over time. As awareness grows, so does the importance of educating the public on how to recognize and respond to these threats effectively.
5 reports
Gorenjski glasIndependentCenterFactual 85Objective 80yesterdayAn article published by Gorenjski glas warns readers about a phishing scam where fake emails appear to come from Slovenia's Financial Agency, offering tax refunds. The fraudulent message urges recipients to click on a link, but the email was sent from a non-official domain 'edavki-po.com'. Experts from SI-CERT explain this is a common phishing attack, advising users not to open links or provide personal information. Similar scams have been reported using the Statistical Office's domain to gather business data, which could lead to more sophisticated cyberattacks like BEC (Business Email Compromise).
Bias read (Center): The article presents factual information about a cybersecurity threat without taking a political stance. It focuses on informing readers about a phishing scam and provides expert advice from SI-CERT, maintaining neutrality in its framing.
Why factuality (85): The article accurately describes a phishing attempt involving a fake email from the Financial Agency, citing the false domain 'edavki-po.com' as evidence. It references SI-CERT as an authority on cybersecurity threats and explains the nature of phishing attacks. The content aligns with common knowle
Why objectivity (80): The tone remains informative and advisory, warning readers not to engage with the fake email. While the article presents the situation clearly, it slightly leans toward caution rather than neutrality, but does not introduce subjective bias or emotional language.
Primorske noviceIndependentCenterFactual 85Objective 75yesterdayThe article reports on two incidents of fraud in the area of Koper, Slovenia. In both cases, individuals were approached by strangers who claimed to need money urgently. In the first incident, two men from Poland allegedly tricked a man into lending them 400 euros, promising to repay via bank transfer. In the second case, a man approached a Hungarian woman, claiming he had lost his ID card in Zagreb and asked her to lend him 500 euros, assuring him he would send the money back. A woman present showed him a fake transaction confirmation on her phone. The Koper police authority warned citizens to remain vigilant and advised them to report such scams immediately to emergency services.
Bias read (Center): The article presents factual information about fraudulent activities without overtly criticizing or praising any political group, ideology, or policy. It focuses on informing the public about recent scams and advising caution, which aligns with a balanced, center-oriented approach. There is no clear
Why factuality (85): This article corroborates the previous report with similar details about the fraudulent incidents. It includes quotes from the police spokesperson, adding credibility. The information matches the other articles, reinforcing the factual consensus.
Why objectivity (75): The language is alarmist, using phrases like 'predrzne goljufe' (dangerous fraudsters) which may influence reader perception. While intended to raise awareness, this phrasing introduces some bias, affecting objectivity.
Primorske noviceIndependentCenterFactual 85Objective 752 days ago Police warn of fraudulent cash and fake online transfersThe article reports on two incidents of fraud in Koper, Slovenia, where individuals pretended to be married couples from Poland and a man claiming to have lost his wallet in Zagreb sought financial assistance. In both cases, the perpetrators attempted to defraud victims by requesting money via fake online transfers. Police authorities have warned that these actions constitute scams and advised against falling for such schemes.
Bias read (Center): The article presents factual information about fraudulent activities without overtly criticizing or praising any political group, ideology, or official. It focuses on law enforcement warnings rather than partisan commentary, maintaining a balanced tone.
Why factuality (85): The article accurately reports two incidents of fraud where individuals posing as Polish couples asked for money under false pretenses. It aligns with the cross-source consensus from the other articles, providing specific details such as amounts requested and locations. No primary source was availab
Why objectivity (75): The tone is cautionary and informative, aiming to warn readers about fraud. While not overtly biased, there is a slight editorializing tone in the concluding statement urging vigilance, which slightly reduces objectivity.
Svet24IndependentCenterFactual 60Objective 602 days agoThe article warns about 'foreigners' who tell elaborate stories to scam people out of up to 400 euros. The police are cautioning the public against falling for these scams, which often involve fabricated narratives. Such incidents highlight the need for vigilance against fraudulent activities involving individuals claiming to be from other countries. The focus is on preventing financial loss through deceptive storytelling.
Bias read (Center): The article presents a factual warning from the police about a specific type of fraud without overtly favoring any political ideology. It focuses on law enforcement action rather than taking a partisan stance. There is no clear ideological framing or emphasis on particular political groups, making a
Why factuality (60): This article is incomplete and lacks specific details about the incidents. It only mentions the police warning without elaborating on the cases, making it less reliable compared to the other articles. The lack of detail limits its factual value.
Why objectivity (60): The article is brief and lacks depth, making it difficult to assess objectivity. It appears to be a summary rather than a full report, possibly leading to a more subjective interpretation due to limited context.
Maribor24IndependentCenter14 hr. agoThe article warns readers about a phishing scam involving fake messages from ZZZS (a Slovenian social security institution), which claim recipients are entitled to a refund. These messages direct users to counterfeit websites where they are asked to enter personal information, potentially leading to financial loss. The article explains that phishing is a form of online fraud where attackers trick victims into sharing sensitive data such as passwords, credit card details, or access to online banking. It advises against clicking on suspicious links, even if they appear to come from trusted institutions like banks or government agencies. If someone has already entered their information on a fake site, they are urged to contact their bank, change compromised passwords, and check account security settings. Readers are also advised to report suspicious messages to the national cybersecurity response center SI-CERT.
Bias read (Center): The article discusses a general cybersecurity threat (phishing) and provides practical advice on how to identify and respond to such scams. There is no political framing, bias, or mention of political entities, policies, or figures. The content remains neutral and informative.
★
Keep the news honest.
ObjectiveNews is reader-funded and ad-free — we show you the bias instead of hiding it. Support independent journalism for €5/month.
Become a Supporter
Slovenia
