Disguised Cyber Risks On The Colombian Shore: The Insurance Trap

This report outlines a multi-stage phishing campaign in Colombia where attackers promote fake SOAT insurance offers via social ads and WhatsApp, collect license-plate data to validate and build credibility using public RUNT data, and then steal money by redirecting victims to fraudulent payment gateways or QR payment requests; over 100 fraudulent sites were identified since early 2024 and the report recommends verification, reporting, user education, and digital risk/fraud protection to detect and block these scams.