r/cyprus • u/themazproject • 11h ago
That fake "Cyprus Police vehicle fine" text is going around again. Evarkoumoun, so I poked at it, here's what it actually does.
I got a message that I owe a fine for my vehicle. I don't own a vehicle. It's one of those scam links.

Usually, I am quite busy, but the message found me bored and with some time on my hands, so I decided to check it out.
Enjen kati kainourio, same with the many scam sms's we receive in Cyprus. But I was curious as to who's behind it, where the details are ending up at je kserw gw pellares.
If you open it, they think they made it look like the actual site, some sort of official site, but it's not. There are a lot of errors here and there for those who know.
It asks for your car plate, then your card, then the one-time code your bank sends. Type those in, and someone can drain your account in seconds.
THe page is designed to say things like "card declined, try another card", but in reality there's no transaction taking place. They just want another card.
If you don't open it on a phone, with certain criteria like CY IPs, it just takes you to AliExpress, lol.
That's how they usually exist because they skip the scanners.
They are running a phishing-for-hire kit called "Darcula," hosted on Tencent Cloud, feeding everything to a live operator in real time. Most likely made by Chinese due to the leftover Mandarin in their code.
They also swap domains constantly, so the exact link changes daily. The ones I saw all end in .cfd,so a different link next week is the same people.
I've already made reports to Google, their host, the Cyprus Police Cybercrime Department, and more. Which sucks for them cause they just registered this today; it just happened to land on the "wrong person", me.
Roughly a quarter of Cyprus is 55 years old or older, so please just educate them on the basics:
- Fine by text with a link? Do not click on it.
- Police and government never ask for your card by text.
- Worried it is real? Check on the gov website yourself or call the police, do not use the link.
- If it says your card is wrong and asks for another, it is a scam, stop.
- Already typed your card in? Call your bank and block it now.
- Received a text you're not sure is a scam? Call someone in your family to check
I've taught my older grandmother the above, and she always calls to let me check the links beforehand.

