<figure id="attachment_412918" class="wp-caption alignnone" style="width: 2500px;" aria-describedby="caption-attachment-412918"><a href="#" data-ident_hash="e6298db2"><img src="https://res.cloudinary.com/fridaydigital/image/private/t_article_image/wpmedia/2025/02/2ccaee6e19ef52d354574a78a9c02988.jpg" alt=""></a><figcaption id="caption-attachment-412918" class="wp-caption-text">Text of a phishing e-mail pretending to be from an ETC inquiry service.</figcaption></figure>
<figure id="attachment_412919" class="wp-caption alignnone" style="width: 1876px;" aria-describedby="caption-attachment-412919"><a href="#" data-ident_hash="f436bd9d"><img src="https://res.cloudinary.com/fridaydigital/image/private/t_article_image/wpmedia/2025/02/74c2aeb8852419e65c9e78a66b472d80.jpg" alt=""></a><figcaption id="caption-attachment-412919" class="wp-caption-text">When you click on the provided link, a screen appears attempting to steal personal information such as your address and name, followed by credit card information. It is created by copying the real site and is highly sophisticated.</figcaption></figure>
<h2>The sophistication of the raging phishing scam</h2>
&#8220;Your account has been temporarily suspended.&#8221;
&#8220;Update your account information and get a chance to earn up to 10,000 points!&#8221;
With various attention-grabbing phrases, phishing scams are flooding inboxes with URLs that lead victims to fake websites nearly identical to the real ones, attempting to steal credit card and personal information. Reports of suspicious emails and messages reached over 1.71 million cases in 2024 alone, setting a new record for the worst year. Makiko Morisawa from the National Consumer Affairs Center’s Consultation Division 2 explains:
&#8220;Phishing emails in the past were easy to spot because the Japanese was unnatural or the URLs looked suspicious. However, today the sentences are much more natural, and the transition to fake websites is seamless. As a result, more and more people are falling victim.&#8221;
While the methods remain traditional, they have been updated with new techniques, including the use of AI, according to IT journalist Hiroshi Mikami:
&#8220;A recent trend is that phishing emails impersonate trustworthy organizations based on current events. For example, during tax season in February and March, they pose as the National Tax Agency, and during bonus season, they impersonate electronics retailers or e-commerce sites. This adds to the realism. Delivery services are also frequently exploited.&#8221;
The pages displayed after clicking the URLs are becoming more sophisticated as well. Eiichi Kanayama, an expert from the Information-Technology Promotion Agency (IPA), expresses his outrage:
&#8220;Look at this screen for the ETC inquiry service. The specifications are identical to the real site down to the smallest details. What&#8217;s worse is that after stealing personal information, they redirect the victim to the real homepage, which shows just how malicious these scams are.&#8221;
<div data-friday-ad-slot="AD_inArticle"></div>
<div data-friday-nextpage-lead="Real-time phishing"></div>
Two Step Authentication is also breached
Currently, many web services use one-time passwords or send authentication numbers to specified addresses as part of two-factor authentication. To bypass this, real-time phishing has been developed. Mr. Mikami, mentioned earlier, explains this using internet banking as an example:
&#8220;When a user enters their ID, password, or other information on a fake site, the information flows to a criminal group. The group immediately enters that ID and password on the real site. Then, a one-time password is sent to the user’s phone via SMS, making them believe it is a legitimate site. At this point, the user enters the one-time password on the fake site without suspicion, allowing the criminals to bypass the two-factor authentication. Since the timing of the authentication message appears normal, the user doesn&#8217;t realize they are interacting with a fake site until it&#8217;s too late.
While phishing scams have been increasing in online banking, they have recently started to appear on e-commerce sites. A case involving a fake Amazon site utilizing real-time phishing methods has also been reported.&#8221;
What can we do to avoid being tricked? Experts on phishing countermeasures unanimously agree: &#8220;It’s important to stop trying to determine if a message is real or fake.&#8221;
&#8220;With the introduction of AI, it has become nearly impossible to distinguish between real and phishing messages. Even if the email seems genuine, the rule is to avoid clicking URLs in emails or SMS messages. Even if you receive a message that seems urgent, like &#8216;Unauthorized access detected,&#8217; it’s better to avoid clicking any URL in the email and instead log in via the official website or app. This is the best way to prevent damage.
It’s also important to prevent receiving phishing emails altogether. Google’s Gmail spam filter is excellent at blocking fake emails. Since you can also receive emails from other providers through Gmail, it’s a good idea to actively use it.&#8221; (Mr. Mikami)
What should you do if you accidentally open a fake message? Mr. Kanayama, mentioned earlier, explains:
&#8220;In most cases, just opening an email or URL doesn’t immediately cause harm. As long as you don’t enter personal information, you’re generally fine. However, if you use the same password across multiple sites, there’s a chance that your other accounts could also be compromised. If you do accidentally enter a password, you should immediately change it.&#8221;
If, for some reason, you enter personal information, a countermeasure table is provided for reference.
It’s nearly impossible to tell these scams apart now. Even if you&#8217;re curious, the best starting point is to avoid clicking any URLs in suspicious emails.
<figure id="attachment_412920" class="wp-caption alignnone" style="width: 2389px;" aria-describedby="caption-attachment-412920"><a href="#" data-ident_hash="aec69d77"><img src="https://res.cloudinary.com/fridaydigital/image/private/t_article_image/wpmedia/2025/02/afb6b9c6a8637ddec46201f7dd692298.jpg" alt=""></a><figcaption id="caption-attachment-412920" class="wp-caption-text">There is no end to the number of cases of text messages sent by short mail, which are deceptive of financial institutions. They are trying to create a sense of crisis with messages such as &#8220;Important confirmation.&#8221;</figcaption></figure>
<figure id="attachment_412921" class="wp-caption alignnone" style="width: 2500px;" aria-describedby="caption-attachment-412921"><a href="#" data-ident_hash="611b7f08"><img src="https://res.cloudinary.com/fridaydigital/image/private/t_article_image/wpmedia/2025/02/c3eb28282237d088291a3ad78fa034da.jpg" alt=""></a><figcaption id="caption-attachment-412921" class="wp-caption-text">Fake websites imitating JR East&#8217;s &#8220;Ekinet&#8221; service are also indistinguishable from the real thing. The fake websites deceive by claiming that if you don&#8217;t do anything, you will be automatically withdrawn from the membership.</figcaption></figure>
<figure id="attachment_412922" class="wp-caption alignnone" style="width: 2209px;" aria-describedby="caption-attachment-412922"><a href="#" data-ident_hash="800046f9"><img src="https://res.cloudinary.com/fridaydigital/image/private/t_article_image/wpmedia/2025/02/8a87888cbcb6987936d6662cf7d8bf5d.jpg" alt=""></a><figcaption id="caption-attachment-412922" class="wp-caption-text">Fake advertisements on social networking services that deceive users about celebrities such as Yusaku Maezawa have also appeared, from which information is extracted.</figcaption></figure>
<a href="#" data-ident_hash="781db6fc"><img src="https://res.cloudinary.com/fridaydigital/image/private/t_article_image/wpmedia/2025/02/9d74838a7f6cfbda76e20065c6e461d5.jpg" alt=""></a>
From the February 21-28, 2025 issue of &#8220;FRIDAY&#8221;

 Courtesy of IPA (1st to 4th photos)

 Phishing scams that lure you to fake websites to steal your credit card information and personal data are on the rise, and the AI-evolved fake websites are becoming more sophisticated, with no end in sight to the number of people falling victim. If you have entered your information... here are some tips to prevent this from happening again.

AI-Driven Phishing Scams: Railway and Delivery Service Fake Websites Are Getting Harder to Spot

Access Ranking