Cyber Unit Warns of Scam Offering Free Concert Tickets

Israel's National Cyber Unit is warning the public about a sophisticated online scam that uses AI-generated advertisements on Facebook and Instagram to lure victims with offers of free tickets or benefits for popular concerts. The scam often impersonates well-known companies or banks, such as Bank Leumi, in fake ads promoting events like a concert by Omer Adam.

The scheme involves users clicking on these sponsored ads, leaving their details, and then receiving a follow-up message from the scammers. This message requests an "authentication code" sent via SMS. However, this code is actually a SIM swap authentication code, which, if provided, allows the attackers to take control of the victim's mobile phone line.

Cyber Unit officials advise the public never to share SMS authentication codes, even if the request comes from someone claiming to be a representative of a known company. They stress the importance of carefully reading SMS messages before sharing any code and verifying offers and ticket availability only through official company channels. Individuals who lose mobile reception after sharing a code should immediately contact their cellular provider.

This follows a similar scam last month that impersonated tickets for a Sarit Hadad concert, also using AI and impersonating Bank Leumi. In that instance, victims who provided details were tricked into revealing real-time One-Time Passwords (OTP) during a fake verification call, leading to the takeover of their bank accounts.

Matan Gidionan, founder of the anti-fraud app Fisherman, noted that similar scams have targeted fans of other artists like Eyal Golan. He emphasized not clicking on links, not sharing credit card details, and not sharing SMS codes. Bank Leumi recently filed a NIS 26 million lawsuit against Meta, alleging the social media company profits from impersonations on its platforms rather than preventing them.