This phishing method targets residents of France, but similar schemes are used globally to mimic national health insurance services. Scammers use fake websites like ameli-vitale.fr to steal your sensitive data.
1. The Hook (The “Urgency” Trick)
You receive an SMS (smishing) or an email claiming that your Carte Vitale (French health insurance card) has expired or needs to be updated. The message often includes a warning: “If you do not update your card, your healthcare reimbursements will be suspended.”
2. The Trap (The Fake Website)
The link leads to a professional-looking site that perfectly mimics the official Ameli portal.
- Official Domain: The ONLY legitimate site is ameli.fr.
- Fake Domains: Scammers use look-alike addresses such as ameli-vitale.fr, service-vitale-info.com, or renouvellement-vitale.net.
3. The Goal (Data & Money Theft)
Once you are on the fake site, the scammers ask for:
- Personal Information: Full name, address, and Social Security number (to use for identity theft).
- Credit Card Details: They claim you need to pay a small “shipping fee” (usually around âŹ0.99) for your new card.
- The Kill: After you enter your card details, they may also try to intercept your bank’s 2FA (SMS code) to authorize much larger fraudulent transactions.
How to Protect Yourself:
- Carte Vitale never expires: In France, the physical card does not have an expiration date. You never need to pay to “renew” it online.
- Trust only the official app: If you have doubts, log in directly through the official Compte Ameli mobile app or type ameli.fr manually in your browser.
- Check the URL: If the domain contains extra words, hyphens, or ends in anything other than .fr, it is a scam.
- Government agencies won’t text for money: Official health services will never ask for your credit card details via SMS or email.
Stay safe: If you receive a text about your health cardâdelete it immediately.