Scammers Impersonate Neighbors to Lure Residents into Fake Bomb Shelter Chat Groups for Data Theft

Fraudsters have launched a new social engineering scheme that exploits public anxiety by impersonating neighbors and inviting victims to join Telegram chats supposedly dedicated to organizing bomb shelters in residential buildings. The callers claim an urgent residents’ meeting is taking place and insist that the target must share personal details and join the group chat to be included on the attendance list. In reality, decisions about creating official bomb shelters are governed by strict state regulations and cannot be made through informal neighbor votes, making the entire premise a clear red flag. Once the victim engages, scammers quickly pivot from the supposed shelter topic to requesting names, phone numbers, and other sensitive information. Victims who continue the conversation may later receive follow-up calls from fraudsters posing as government officials who claim the victim’s data has been compromised, pressuring them into transferring money or taking other harmful actions. The scheme is easily identified by callers who refuse in-person meetings, push for immediate chat enrollment, and avoid any verifiable details about the building or meeting. Security experts recommend ending such calls immediately and never sharing personal information with unknown individuals over the phone.

AntiMalwareTranslated from Russian

Read at source

Scammers have developed a new social-engineering tactic that capitalizes on heightened public concern over safety by pretending to be neighbors and inviting people to join chat groups about equipping residential buildings with bomb shelters.

According to reports from the Telegram channel “Lapsa Media” and the author channel “Bez obmana” run by Alexander Yelshevsky, the fraudsters call residents and claim that an urgent meeting of building occupants is being organized to discuss the creation of a bomb shelter. The caller introduces himself as a neighbor, stresses the importance of the gathering, and urges the recipient to be added to a common chat so they can participate.

How the Scam Unfolds

Instead of discussing the supposed shelter, the conversation quickly shifts to requests for personal data. Victims are asked to provide their name, phone number, or other identifying information under the pretext of being added to the attendance list. The scammers further claim that without joining the chat and appearing on the list, the person will be unable to attend the meeting.

The fundamental flaw in the story is that residents cannot simply vote to establish a bomb shelter. Such facilities must be created in accordance with official state requirements and safety regulations. Therefore, any claim of an urgent neighbor meeting that cannot be accessed without handing over personal information to a stranger over the phone is itself a strong indicator of fraud.

Second Stage of the Scheme

If the target continues the conversation, a follow-up stage often occurs. The victim may later receive calls from individuals posing as government officials who state that the victim’s data has fallen into the hands of criminals. These callers then pressure the person to transfer money or perform other actions under the guise of protecting their information or resolving the issue.

Recognizing and Avoiding the Scam

  • The caller avoids any suggestion of an in-person meeting and insists on continuing the discussion exclusively by phone.
  • The conversation rapidly moves away from the supposed shelter topic toward requests for personal data.
  • The caller pressures the victim to join an unknown chat immediately.

Security experts advise ending such calls at once. Personal information should never be shared with strangers over the phone. If the caller is genuinely a neighbor, any legitimate issue can be discussed face-to-face within the building.

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Fraud & Social Engineering

Scammers Use *#62# USSD Command to Fabricate Surveillance Claims and Steal Victims' Funds
Aroshka Cloud Faces Scrutiny Over Alleged False Claims of SOC 24/7 Operations and High-End Infrastructure
Reports Surface on Alleged De-Anonymization of Admins Running Major Russian Hacker Forums