A fraudulent email campaign that impersonates the identity of 'Mi Carpeta Ciudadana' has been detected by the National Cybersecurity Institute (INCIBE). The alert affects users throughout Catalonia, especially in urban areas where the use of digital administration services is common.
The fraudulent email and its content
The message arrives from the address "[email protected]" and simulates an official notification. In the text, the recipient is informed that "an income of 552.97 euros has been generated in their favor". INCIBE warns that this type of email seeks to capture attention with specific figures and legal references to feign legitimacy.
The agency points out that fraudulent senders use technical language and mention regulations such as Law 39/2015, as well as file references such as CC/2026/04837219 or names of official bodies. The objective is to intimidate and give confidence to less experienced users in digital procedures.
Security recommendations and official warnings
The Ministry of Economy, Trade and Business reminds on the portal of 'Mi Carpeta Ciudadana' that "it will never request that you identify yourself by means other than those admitted by the Cl@ve system, nor will your account number be requested".
"In case of any doubt about the origin of the email, access directly the website of 'My Citizen Folder' or through the mobile application" - Ministry of Economy, Trade and Business
INCIBE insists that the public administration in Spain "always uses domains that end in .gob.es". Any other domain, such as .com or .info, should be considered a warning sign of possible fraud.
How to act upon the reception of the mail
- If this email is received and the link has not been accessed, it is recommended to report it to INCIBE's incident mailbox.
- Citizens have the Cybersecurity Help number 017 to resolve doubts or receive assistance.
- Avoid providing personal or banking data outside official and verified channels.
This type of fraudulent campaign can affect users in any municipality, from central neighborhoods of Barcelona to towns in the metropolitan area, Girona or Tarragona. Citizen collaboration and attention to details in emails are key to avoid being a victim of these impersonation attempts.